# Privacy Policy — Azure Standup
Last updated: 8 September 2026
Azure Standup is a browser extension that generates a daily standup message
from the time you have logged against your own Azure DevOps work items.
## The short version
The extension has no server, no account system and no analytics. It does not
send your data to the developer or to any third party. Everything it stores is
kept in your own browser profile, and the only service it contacts is the Azure
DevOps organization you choose to connect.
## What the extension stores
All of the following is written to `chrome.storage.local`, which lives in your
browser profile on your own device:
- **Your Azure DevOps organization name and personal access token.** You enter
these yourself in the Settings tab. The token is used solely to authenticate
requests to your organization's Azure DevOps REST API.
- **Which time fields you want tracked**, and whether each counts as
development or testing time.
- **Your message templates, default notes and project aliases.**
- **Your daily entries** — for each day, the work items you logged time
against, their IDs, titles, project names and the hours recorded.
- **A local diagnostic log** of recent extension activity, used by the
"Capture status" panel in Settings to help you confirm that capture is
working. Your access token is never written to this log.
## What the extension sends, and where
The extension makes network requests to one destination only: the Azure DevOps
Services domains of the organization you connected (`dev.azure.com` and the
related `*.visualstudio.com` hosts). Those requests carry your access token so
Azure DevOps can authenticate you, and they read your own work item data.
No data is sent to the developer. There is no backend service, no telemetry, no
crash reporting and no advertising.
## What the extension reads on Azure DevOps pages
On Azure DevOps pages only, the extension observes the page's own work item API
traffic so it can notice when you save a change to a time field and record the
hours right away. It reads request URLs and work item field values for this
purpose. It does not block, redirect or alter any request, and it does not run
on any other website.
## Permissions and why they exist
- **storage** — to keep your settings, your token and your day history on your
device.
- **webRequest** — to detect work item saves on Azure DevOps hosts.
- **Host access to Azure DevOps domains** — to call the Azure DevOps REST API
as you, and to run the capture scripts on Azure DevOps pages.
The extension requests no other permissions and no access to any other site.
## Scope of access to your Azure DevOps data
The extension is designed to work with a token scoped to **Work Items (Read)**
only. With a read-only token it cannot create, modify or delete anything in
Azure DevOps. The scope of the token you create is under your control.
## Your control over the data
- **Remove the token** at any time with the "Remove PAT" button in the Settings
tab. You should also revoke it in Azure DevOps under User settings >
Personal access tokens.
- **Delete a day's entries** individually from the Entries tab.
- **Delete everything** by removing the extension from your browser, which
clears its local storage.
Snapshots of recently viewed work items are pruned automatically after 60 days.
Your daily entries are kept until you delete them, because the day history is
the point of the tool.
## Data selling and unrelated use
The developer does not sell your data, does not transfer it to third parties,
and does not use it for any purpose unrelated to generating your standup
message. There is no creditworthiness or lending use of any kind.
## Children
The extension is a workplace tool and is not directed at children.
## Changes to this policy
If this policy changes, the updated version will be published at the same
location and the date above will be revised.
## Contact
Questions about this policy can be raised through the support link on the
extension's Chrome Web Store listing.