Requarry privacy policy
Effective 2026-10-18 · applies to the Requarry extension for VS Code and compatible editors, version 0.1.0 and later · publisher: Gilad Amar ("we")
1. Data the extension handles on your device
| Data | Where it is kept | How long |
|---|---|---|
Your .http files, environments and variables | Files in your workspace that you control | Until you edit or delete them |
| History: the last 50 requests you sent: the request as written in the file, the method and final URL, the status code and timing (not response bodies) | VS Code global extension state on your computer | Until you run "Clear History" or uninstall |
| Header profiles (Pro) | VS Code global extension state | Until you delete them or uninstall |
| The selected environment and header profile | VS Code workspace extension state | Until you uninstall |
| Cookies set by servers you call | Memory only | Cleared when VS Code closes |
Team file .requarry/team.json (Pro) | Written to your workspace only when you run the command, with secret values stripped | Until you delete it |
| Response files | Written only when you use >> in a request or click Save | Under your control |
| License details if you activate Pro: plan, activation ID, purchase email and expiry, last check time. The key itself is kept in VS Code SecretStorage (your OS keychain) | VS Code global state + SecretStorage | Until you deactivate the license or uninstall |
Requests and history can contain tokens or personal data you put in them. Prefer variables and test credentials.
2. Data that leaves your device
Your requests. When you send a request, Requarry sends it, with its headers, body, any files it references and cookies from the session, to the address you wrote (following redirects unless you turn that off). Requests carry User-Agent: Requarry/<version> unless you set your own. Those servers handle the data under their own terms. Values from .env files and environment variables are read locally and sent only where your request puts them. Imports read only the file you choose.
License checks. If you enter a Pro license key, the extension sends HTTPS requests to https://api.lemonsqueezy.com/v1/licenses/: activate (your key and a random instance name), validate (your key and the activation ID, at most once every 7 days) and deactivate. Lemon Squeezy (Merchant of Record) receives your IP address as with any web request and processes this data under its privacy policy.
Nothing is sent to us. Requarry has no telemetry or analytics.
3. Workspace trust
In untrusted (Restricted Mode) workspaces, requests are still sent only when you run them, and the team file is not read.
4. Your choices and rights
Clear history, delete header profiles, deactivate your license, or uninstall Requarry. We hold no extension data on our servers. For purchase records held by Lemon Squeezy or any privacy question (including GDPR/UK GDPR requests), email busywright@mail.grokbot.com.
5. Children
Requarry is a developer tool and is not directed at children under 16.
6. Changes
If a future version handles data differently, we will update this page and the effective date before releasing it.
7. Contact
Gilad Amar, Thailand · busywright@mail.grokbot.com