Privacy Policy

Dynamics 365 Power Pane Next

Last updated: 4 November 2026 · Contact: nicktech1337@gmail.com

1Who we are

Dynamics 365 Power Pane Next (“the extension”) is an independent open-source project distributed under the MIT licence. The publisher is the individual developer listed on the extension’s Chrome Web Store listing (“we”, “us”). You can reach us at nicktech1337@gmail.com.

2What the extension does

The extension injects a pane into pages served from *.dynamics.com so that developers, testers and administrators can inspect and act on the record they are already viewing: copy record identifiers and URLs, inspect form fields, option sets and entity metadata, open maker and administration pages, apply Microsoft’s documented troubleshooting URL flags, run FetchXML or JavaScript against the user’s own environment, and — when the signed-in user holds the Dataverse privilege prvActOnBehalfOfAnotherUser — send that user’s own requests as another user by setting the documented CallerObjectId request header.

3Data the extension handles

Category	What it includes	Where it stays
Dynamics page content	Field values, record data, entity metadata, option set labels and form structure, read from the page you are viewing to display them in the pane or copy them when you ask.	Never stored by the extension, never transmitted. Clipboard only when you click copy.
Organization user data	Display name, email address, system user id, Microsoft Entra object id, business unit, security roles and teams, returned by your organization when you use Impersonate User, User Permissions or Role Check.	Shown in the pane. Users you recently searched for or impersonated may be remembered on your device to make the picker faster.
Preferences	Visible actions, their order, keyboard shortcuts, light or dark theme, pane size and position.	chrome.storage.sync, which Chrome may sync across your signed-in devices.
Snippets	FetchXML queries and JavaScript snippets you create or import.	chrome.storage.local on your device.
Impersonation session state	The target user’s identifiers and the environment host while impersonation is active.	chrome.storage.session, cleared by the browser on restart.

4Where data goes

We do not collect, receive, sell, rent or share your data. Specifically:

• there is no account and no sign-in;
• we operate no server and no database;
• there is no analytics, telemetry, crash reporting, advertising or third-party SDK of any kind;
• no data is transmitted to us or to any third party.

Every network request the extension causes goes to the same Dynamics 365 / Dataverse environment you already have open, over HTTPS, using the session your browser already holds. The extension never reads, stores or transmits cookies, access tokens or passwords, and it does not read your browsing history.

5Local storage and deletion

Everything the extension writes lives in your Chrome profile. You can remove it at any time by opening the extension’s options page and choosing “Restore default settings”, by deleting individual snippets, or by uninstalling the extension — uninstalling removes its local and session storage. Preferences stored through chrome.storage.sync are removed when the extension is uninstalled, subject to Chrome’s own sync behaviour.

6Permissions

• storage — store your settings, snippets, recent users and impersonation session state.
• tabs — attach impersonation rules to the correct tabs and reload a tab after the identity changes.
• declarativeNetRequestWithHostAccess — set the documented CallerObjectId request header while impersonating. Rules are session-scoped, limited to the active environment’s host, and removed when impersonation stops or the browser restarts.
• https://*.dynamics.com/* — run the pane and its content scripts only on Dynamics 365 / Dataverse pages.

7Impersonation and write actions

Impersonation is performed server-side through documented Dataverse request headers and only works if the signed-in user holds the “Act on behalf of another user” privilege. The effective privileges are the intersection of both users’ privileges. Changes to user roles, teams and business units are sent to your organization’s Web API as you, with your existing permissions. These features are intended for test, development and administration work; you are responsible for using them in accordance with your organization’s policies and Microsoft’s terms.

8Microsoft’s role

Your Dynamics 365 / Dataverse environment is operated by your organization and Microsoft. Data in that environment is governed by your organization’s agreements with Microsoft, not by this policy. We have no access to your environment and receive nothing from it.

9Chrome Web Store Limited Use disclosure

The extension’s use of information received from Chrome APIs and from the pages it runs on adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:

• data is used only to provide or improve the extension’s single purpose, the in-page action pane described in section 2;
• data is not transferred to third parties except where necessary to provide that single purpose, to comply with applicable law, or for security purposes such as investigating abuse;
• data is never used or transferred for personalised, retargeted or interest-based advertising;
• no human reads your data, except with your consent for support, where necessary for security, where required by law, or after aggregation and anonymisation for internal reporting;
• data is not used to determine creditworthiness or for lending purposes.

10Children

The extension is a professional tool for Dynamics 365 administrators and developers and is not directed at children. We do not knowingly collect data from children.

11Changes

If the extension’s data handling changes, this policy will be updated and the “Last updated” date changed. Material changes will be noted in the extension’s release notes.

12Contact

Questions about this policy or about data handling: nicktech1337@gmail.com
Source code: github.com/Musecanyang/dynamics-365-power-pane-next