Admin Lens privacy policy

The short version

Admin Lens doesn't collect, store or send any personal data or anything about the pages you visit. There are no accounts, no analytics and no tracking.

What it reads, and where that stays

On the sites where it runs, Admin Lens reads the visible text of the page to find error codes, event IDs, Microsoft GUIDs, licence names, Azure resource IDs, access tokens, UTC times and Microsoft Graph permission names. That happens entirely inside your browser. The page text is never stored, logged or sent anywhere, including to azureblog.co.uk.

It skips password fields, text boxes, editable areas and scripts.

When you right-click selected text and choose Explain with Admin Lens, it looks only at that selection, on that page, at that moment. On sites where highlighting is off, this uses the browser's activeTab permission, which only applies after you click.

Access tokens

If a page shows an access token (a JWT), or you paste one into the popup, Admin Lens decodes its readable parts on your device to show you the claims. The token is not stored, logged, verified against any service or sent anywhere.

Network requests

The only requests Admin Lens makes are to download seven public reference files from https://azureblog.co.uk/open/v1/: Entra sign-in error codes, Intune error codes, Windows event IDs, Microsoft Graph permissions, well-known Microsoft IDs, Microsoft deadlines and the list of posts on the site. It does this when installed, when the browser starts if the copy is more than 20 hours old, every 12 hours, and when you press Update data now.

These requests contain nothing about you or your browsing. As with any website, the site's host, Azure Static Web Apps, processes your IP address to deliver the files and may keep it in short-lived service logs. See the site privacy page.

What's stored on your device

• The downloaded reference data.
• Your settings: whether highlighting is on, which kinds of things are highlighted, whether it runs on every site, and the list of sites you have paused it on.

Both are kept in the browser's extension storage on your device and are removed when you uninstall Admin Lens.

Permissions

• storage: Keep the reference data and your settings on your device.
• alarms: Refresh the reference data every 12 hours.
• scripting: Turn highlighting on for every site, only if you choose that in the settings, and show the explanation when you use the right-click menu.
• contextMenus: Add Explain with Admin Lens to the right-click menu when you select text.
• activeTab: Let the right-click menu and the popup work on the tab you're using, only after you click.
• Access to azureblog.co.uk: Download the public reference data.
• Access to Microsoft admin portals and Microsoft Learn: Highlight and explain codes and permissions on those pages.
• Address bar keyword: Typing al in the address bar searches the reference data on your device. Nothing you type there is sent anywhere by Admin Lens.
• Access to all sites (optional): Only requested if you switch on "Work on every website" in the settings. You can turn it off at any time.

Sharing

No data is sold, shared or transferred to anyone, because none is collected.

Changes

If this policy changes, this page will be updated and the extension's version number will go up.

Contact

Questions about this policy: see the contact details on the site privacy page.

Admin Lens is an independent project and isn't made or endorsed by Microsoft.