Last updated: 5 October 2026
This extension collects nothing, stores nothing, and sends nothing anywhere.
It requests no permissions. It has no background service worker, no content scripts, and makes no network requests of its own.
The extension only does anything while you have Chrome DevTools open and the OmniScript panel in view.
Page data. It reads properties of elements on the page you are inspecting, using the standard chrome.devtools.inspectedWindow API — the same access the DevTools Console already gives you. By default it looks for three properties an OmniScript element exposes: jsonDataStr (the live data payload), jsonDef (the element/structure definition) and scriptHeaderDef (script header, including the custom-label map used to resolve labels in multi-language scripts). You can point the Property and Definition fields at any other property name, in which case it reads that instead. To find those elements it walks the document, any open shadow roots, and same-origin iframes.
Network traffic. The Remote actions tab observes requests the inspected page makes, using chrome.devtools.network. For requests that look like Apex calls it reads the request and response bodies in order to decode the remote action, its input and its output. This is the same traffic already visible to you in the Network tab.
Frames. It asks DevTools which documents are loaded, so it can find an OmniScript inside an iframe such as the OmniScript Designer preview.
What it writes to the page. While scanning it sets window.__omniHosts on the inspected page to an array of the elements it found, and window.__omniPeekCache to the parsed copy of the definition it last read, so it does not have to parse it again on every refresh. When you click Reveal element it also sets window.$omni to the selected element and calls the DevTools inspect() helper, so you can poke at it in the Console. When you use Highlight on page (or turn on Highlight on hover) it scrolls the matching element into view and draws a temporary outline over it: a single div with the id __omni_inspector_outline that removes itself after a couple of seconds. It writes nothing else and changes no OmniScript data.
All of this stays in the DevTools panel in your browser, in memory only. It is never transmitted, and nothing is written to browser storage; the switches in the panel are not remembered between sessions. When you use the Advanced options the panel also keeps, in memory, the last 20 payloads it read (so two can be compared), a list of which values changed and what they were before, and any values you chose to watch. None of it is discarded the moment the page navigates or the OmniScript closes: the last data read deliberately stays on screen, marked as stale, so you can still look at it after a script ends or the page reloads. It is replaced when you select another OmniScript or change the Property field, and everything is discarded when you close DevTools.
The one deliberate exception is the Remote actions list. While Preserve on reload is ticked (it is by default) the captured calls are kept across page reloads, still only in memory. They are cleared when you close DevTools, untick it, or press Clear.
Nothing, unless you ask for it.
The Save file and Export buttons write data to your own disk when you press them, and the Copy buttons, the right-click menu and the copy keyboard shortcut put what you chose on your clipboard. Nothing is uploaded. The Mask values switch (off by default) replaces strings and numbers with placeholders in everything saved, exported or copied, but not in what is shown on screen.
The toolbar popup and the help panel contain a link to buycoffee.to, which opens in a new tab only if you click it. That site is operated by someone else and has its own privacy policy. No information about you is passed to it by this extension.
There are none. No analytics, no telemetry, no crash reporting, no advertising, no cookies, no user accounts, no third-party services of any kind. No data is sold or shared, because none is collected.
This extension is a viewer. It shows you data that is already on the page you are inspecting and that your Salesforce user is already authorised to see. What that data contains, and what happens to it once you look at it, is outside the extension's control and squarely within yours.
Be aware that an OmniScript payload or a captured remote action can carry personal data, customer records, and internal identifiers. Request payloads may also carry session tokens.
So, concretely:
The author provides this tool as-is and accepts no responsibility for how data retrieved through it is handled, stored, or disclosed. This is a plain description of how the tool works, not legal advice — if you handle regulated or confidential data, follow your organisation's guidance.
If any of this ever changes, the policy will be updated and the change disclosed on the Chrome Web Store listing before the update ships.
Mikołaj Skrzypczyński — mskrz@proton.me
This is an independent, unofficial developer tool. It is not affiliated with, endorsed by, or sponsored by Salesforce, Inc.