Privacy Policy
Last updated: July 15, 2026
Citizen Kev respects your privacy. This page explains what happens to your data when you use citizenkev.com to book a consulting session, and separately, what data is accessed by the tools Citizen Kev publishes — starting with the Salesforce Metadata Downloader Chrome extension.
This website (citizenkev.com)
Booking a session. Clicking “Book a session” takes you to Cal.com, a third-party scheduling service. Cal.com collects what you provide to schedule a session — typically your name, email address, and anything you enter in the booking form. Citizen Kev only sees what you submit through that booking; Cal.com’s own privacy policy governs how that data is stored and processed. See Cal.com’s privacy policy.
Hosting. This site is built and hosted on Framer. Like most hosted websites, our host may log basic technical information (such as browser type and general location) as part of standard web server operation. See Framer’s privacy policy for details. Citizen Kev doesn’t add any additional ad trackers or third-party analytics beyond what the hosting platform provides.
No data is sold. Citizen Kev does not sell, rent, or share your information with third parties for marketing purposes.
Salesforce Metadata Downloader (Chrome extension)
Salesforce Metadata Downloader is a Chrome extension, published by Citizen Kev, that downloads a copy of a Salesforce org’s metadata as a zip file, using the Salesforce session already active in your browser.
Summary: the extension does not collect, transmit, sell, or share any user data with its developer or any third party. There is no backend server. Everything happens locally in your browser and directly between your browser and the Salesforce org you point it at.
What it accesses, and why:
Salesforce session cookie (on
*.salesforce.com/*.force.com) — to authenticate Metadata API calls on your behalf, the same way you’re already authenticated in your browser tab. Used only in the Authorization header of requests sent directly from your browser to your own Salesforce org. Never sent anywhere else. No password is ever seen or stored.The active browser tab’s URL (host only) — to detect which Salesforce org you’re pointed at. Read locally; used only to construct the Salesforce API URL.
Salesforce org metadata (objects, code, layouts, flows, reports, etc.) — this is the extension’s entire purpose: retrieving it via Salesforce’s own Metadata API, downloaded directly to your Downloads folder. Never uploaded anywhere.
Run progress (log lines, phase, byte counts) — stored temporarily in your browser’s local extension storage so the popup can show live progress and survive being closed and reopened. Cleared when you click Reset.
What the extension does NOT do:
Does not operate a server, database, or analytics backend of any kind.
Does not transmit your Salesforce data, session cookie, or org metadata to the developer or any third party.
Does not use tracking, analytics, or telemetry.
Never changes anything in your Salesforce org — every operation is read-only.
Does not access or store your Salesforce password.
Permissions it requests:
cookies — read the Salesforce session cookie to authenticate API requests.
host permissions (
*.salesforce.com,*.force.com) — Salesforce orgs live on customer-specific subdomains of these domains; the extension needs to call whichever org you point it at.activeTab — read the URL of the tab you’re on when you click the extension icon, to detect the org host.
downloads — save the retrieved metadata zip to your Downloads folder.
storage — persist in-progress run state locally so the popup can close and reopen without losing progress.
alarms — keep the background process alive during a long-running retrieve.
offscreen — technical requirement to hand the merged zip to the Downloads API.
power — prevent your computer from sleeping mid-retrieve.
notifications — show a desktop notification when a retrieve finishes.
clipboardWrite — support the “Copy results” button.
Data retention. Run progress stored locally is retained only until you click Reset or uninstall the extension, at which point Chrome removes it automatically. The extension holds no other data.
Future tools
This policy will be extended to cover any additional Chrome extensions or tools published under the Citizen Kev name. Each will follow the same principle: collect only what’s needed for the tool’s stated purpose, never sell data, and disclose exactly what’s accessed.
Changes to this policy
If data practices change — for this site or any Citizen Kev tool — this page will be updated and the date above will change accordingly.
Contact
Questions about this policy can be sent to support@citizenkev.com.
Privacy Policy
Last updated: July 15, 2026
Citizen Kev respects your privacy. This page explains what happens to your data when you use citizenkev.com to book a consulting session, and separately, what data is accessed by the tools Citizen Kev publishes — starting with the Salesforce Metadata Downloader Chrome extension.
This website (citizenkev.com)
Booking a session. Clicking “Book a session” takes you to Cal.com, a third-party scheduling service. Cal.com collects what you provide to schedule a session — typically your name, email address, and anything you enter in the booking form. Citizen Kev only sees what you submit through that booking; Cal.com’s own privacy policy governs how that data is stored and processed. See Cal.com’s privacy policy.
Hosting. This site is built and hosted on Framer. Like most hosted websites, our host may log basic technical information (such as browser type and general location) as part of standard web server operation. See Framer’s privacy policy for details. Citizen Kev doesn’t add any additional ad trackers or third-party analytics beyond what the hosting platform provides.
No data is sold. Citizen Kev does not sell, rent, or share your information with third parties for marketing purposes.
Salesforce Metadata Downloader (Chrome extension)
Salesforce Metadata Downloader is a Chrome extension, published by Citizen Kev, that downloads a copy of a Salesforce org’s metadata as a zip file, using the Salesforce session already active in your browser.
Summary: the extension does not collect, transmit, sell, or share any user data with its developer or any third party. There is no backend server. Everything happens locally in your browser and directly between your browser and the Salesforce org you point it at.
What it accesses, and why:
Salesforce session cookie (on
*.salesforce.com/*.force.com) — to authenticate Metadata API calls on your behalf, the same way you’re already authenticated in your browser tab. Used only in the Authorization header of requests sent directly from your browser to your own Salesforce org. Never sent anywhere else. No password is ever seen or stored.The active browser tab’s URL (host only) — to detect which Salesforce org you’re pointed at. Read locally; used only to construct the Salesforce API URL.
Salesforce org metadata (objects, code, layouts, flows, reports, etc.) — this is the extension’s entire purpose: retrieving it via Salesforce’s own Metadata API, downloaded directly to your Downloads folder. Never uploaded anywhere.
Run progress (log lines, phase, byte counts) — stored temporarily in your browser’s local extension storage so the popup can show live progress and survive being closed and reopened. Cleared when you click Reset.
What the extension does NOT do:
Does not operate a server, database, or analytics backend of any kind.
Does not transmit your Salesforce data, session cookie, or org metadata to the developer or any third party.
Does not use tracking, analytics, or telemetry.
Never changes anything in your Salesforce org — every operation is read-only.
Does not access or store your Salesforce password.
Permissions it requests:
cookies — read the Salesforce session cookie to authenticate API requests.
host permissions (
*.salesforce.com,*.force.com) — Salesforce orgs live on customer-specific subdomains of these domains; the extension needs to call whichever org you point it at.activeTab — read the URL of the tab you’re on when you click the extension icon, to detect the org host.
downloads — save the retrieved metadata zip to your Downloads folder.
storage — persist in-progress run state locally so the popup can close and reopen without losing progress.
alarms — keep the background process alive during a long-running retrieve.
offscreen — technical requirement to hand the merged zip to the Downloads API.
power — prevent your computer from sleeping mid-retrieve.
notifications — show a desktop notification when a retrieve finishes.
clipboardWrite — support the “Copy results” button.
Data retention. Run progress stored locally is retained only until you click Reset or uninstall the extension, at which point Chrome removes it automatically. The extension holds no other data.
Future tools
This policy will be extended to cover any additional Chrome extensions or tools published under the Citizen Kev name. Each will follow the same principle: collect only what’s needed for the tool’s stated purpose, never sell data, and disclose exactly what’s accessed.
Changes to this policy
If data practices change — for this site or any Citizen Kev tool — this page will be updated and the date above will change accordingly.
Contact
Questions about this policy can be sent to support@citizenkev.com.