Last updated: 13 August 2026
Vault Object Inspector is a browser extension that displays technical details about the M-Files object you currently have open in M-Files Web.
Not affiliated with or endorsed by M-Files Corporation.
Summary
The extension collects nothing, stores nothing, and sends nothing anywhere. All processing happens locally, inside your own browser tab. There is no backend service, no analytics, no telemetry, and no third party of any kind.
What the extension accesses
The extension runs only on pages matching https://*.cloudvault.m-files.com/*. On those pages it:
Observes the M-Files Web application's own network responses (its internal gRPC-over-HTTP calls) to learn which object you have open, and reads that object's metadata: internal ID, display (external) ID, GUIDs, object type, class, version, created and modified dates, workflow and state, checked-out user, file names and sizes, and property values.
Makes one request of its own, to the same vault you are already signed in to, asking for the vault's property-definition names (get-property-defs). This is what lets the panel show real property names instead of numeric IDs. The request goes to the same origin as the page you are on — never anywhere else.
Reads the vault GUID from the page URL.
This data is rendered into a panel in the page and then discarded. Closing the tab discards it.
What the extension does not do
It does not transmit any data off your machine.
It does not use chrome.storage, localStorage, cookies, or any other persistence. Nothing survives a page reload.
It does not contact any server other than the M-Files vault you are already using.
It does not include analytics, tracking, advertising, or remote code. All code is contained in the extension package and reviewable.
It does not modify, create, or delete anything in your vault. It only reads.
Authentication
To make its one property-definitions request, the extension reuses the authentication headers that the M-Files Web application already attached to its own requests in the same page. Those headers are held in memory in the page for the lifetime of the tab and are used solely to call the same vault back. They are never stored and never sent to any other destination.
Permissions
The extension requests no optional Chrome/Edge permissions. Its only access is the host match https://*.cloudvault.m-files.com/*, which is required to inject the panel into M-Files Web pages. It cannot read any other site.
Your data rights
Because no data is collected or transmitted, there is nothing held about you to access, correct, export, or delete. Uninstalling the extension removes it completely.
Changes
Any change to this policy will be published with a new "last updated" date and accompany the extension version that introduces it.
Contact
Questions about this policy: eetujanatuinen@gmail.com