Legal

Privacy policy

Last updated October 4, 2026

This policy explains what information the EPIC browser extension (“EPIC”) and the edgeproworkbench.com website handle, and why. EPIC is made by EdgePro Workbench (“we”, “us”).

The short version: EPIC analyses websites inside your browser. What you scan, your history and your reports stay on your device. We don't collect analytics or usage data from the extension. For paid plans, EPIC sends your license key and a device identifier to our payment provider, Lemon Squeezy, to check the license. An optional DNS lookup, which you start yourself, sends only a hostname to Google Public DNS.

1. Information processed on your device

When you use EPIC, it reads the web pages you choose to scan, including page content, network requests and responses, headers, cookies, console messages, performance timings and storage, to produce its analysis. On paid plans it also stores scan history, the change log, saved websites, alerts and reports. All of this is kept in your browser's extension storage on your device. It is not sent to us or to anyone else.

When EPIC finds values that look like secrets (for example API keys or tokens), it shows them masked and does not store them. Saved API snippets in Modify are encrypted with a key that never leaves your browser.

Passive checks are off unless you turn them on (EPIC asks first). While on, EPIC reads each page you open (its title, headings, images, meta tags, load timing and security signals) to count issues and show the number on its toolbar icon. The result is kept only until you close the tab and is never sent anywhere.

Your own JavaScript (Modify). If you run JavaScript in Page Changes, it runs only on the page you're testing, only when you click Execute, and only after you allow user scripts for EPIC in your browser's extension settings. EPIC never downloads code to run.

You can delete EPIC's data at any time: remove individual websites (and their history) in History, shorten the history period, or uninstall the extension, which removes everything it stored.

2. Requests EPIC makes on your behalf

Pages you scan. Quick Scan reloads the page you're on. Site Scan, broken-link checks, redirect checks and source-map checks fetch pages and files from the website you're scanning, from your own browser, without cookies.
Journeys. Recording captures the steps you take on the site you choose (never password or payment values). Runs open the site in a background tab on your computer and take a screenshot of each page; forms that would send data are validated but never submitted. Screenshots stay in your browser's storage.
Scheduled monitoring (paid plans, when you turn it on). At the times you choose, EPIC opens each saved website in a background tab, runs the same checks as Quick Scan, saves the results and a screenshot in your browser, and closes the tab.
HTTP/API Lab (Modify). Requests you build and send go directly from your browser to the address you enter, with the headers and body you enter.
License checks (paid plans). When you activate a license, and about once a day afterwards, EPIC sends your license key and a license instance ID (a random identifier for this installation) to Lemon Squeezy's license API at api.lemonsqueezy.com. The first activation also sends a short label for the installation, made of the browser name, your operating system's name (for example "Windows") and a random code, so your activations can be told apart. Lemon Squeezy returns whether the license is valid and details such as the plan, status and customer email. No information about the websites you scan is included.
DNS lookup (optional). If you click the DNS lookup in Infrastructure, EPIC sends the hostname of the current page (for example www.example.com) to Google Public DNS over HTTPS (dns.google) to retrieve its public DNS records. Nothing else is sent, and it only happens when you start it. Google's privacy policy applies to that request.

EPIC does not include analytics, advertising, crash-reporting or tracking code.

3. Purchases

Payments are processed by Lemon Squeezy, which acts as merchant of record. When you buy a plan, Lemon Squeezy collects your name, email, billing address and payment details to process the payment, calculate tax, send receipts and manage your subscription. We receive order and subscription information (such as your email, plan and license status) so we can provide support. Lemon Squeezy's own privacy policy applies to the information it processes.

4. This website

edgeproworkbench.com is a static website. It does not set advertising or tracking cookies and does not load third-party fonts or scripts. Our hosting provider may keep standard server logs (such as IP address, browser type and pages requested) for security and reliability.

5. Email

If you email us, we use your message and email address to respond and keep the correspondence for support history. Please don't send passwords, tokens or confidential customer data.

6. Sharing

We don't sell or rent personal information. We share it only with the service providers described above (Lemon Squeezy and our website and email hosting), or when required by law.

7. Retention

Data stored by EPIC on your device stays until you delete it, it ages out under your history setting, or you uninstall EPIC. We keep order and support records for as long as needed to provide the service and meet legal and tax obligations.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export personal information we hold about you, or to object to certain processing. Contact us at support@edgeproworkbench.com. For payment data, you can also contact Lemon Squeezy directly.

9. Children

EPIC is not directed at children under 16, and we don't knowingly collect their information.

10. Changes

If we change this policy, we'll update the date above. If a change affects what EPIC sends off your device, we'll say so in the release notes and in the extension's store listing.

11. Contact

EdgePro Workbench: support@edgeproworkbench.com