Last updated: 28 October 2026. Published by Steve Waller ("we"). Contact: stevesupport3003@gmail.com.
IT Admin Toolkit is a browser extension that lets an IT administrator manage their own Microsoft 365, Entra, Exchange Online, Intune and Azure environment. It runs entirely in your browser. We operate no server and do not collect, receive, store, sell or share the data from your Microsoft tenant. The only information involved in our paid subscription is described under "Payments and licensing" below.
You sign in with your own Microsoft account using the standard Microsoft sign-in page. The extension then calls Microsoft's APIs (Microsoft Graph, Azure Resource Manager and Exchange Online) directly from your browser, acting as you. It can only do what your account is permitted to do. Your data travels between your browser and Microsoft only.
None of this is sent to us or to any third party (licensing is covered below). Uninstalling the extension removes it.
The extension has a free tier and a paid "Pro" tier. Licensing and payments are provided by ExtensionPay, which uses Stripe to process payments. When you start a trial or subscribe, ExtensionPay and Stripe receive your email address and payment details. We never see or store your card details. To check whether your licence is active, the extension contacts ExtensionPay with a random identifier for your installation. No Microsoft tenant data, user names, device names or mailbox content is ever sent to ExtensionPay, Stripe or us. See their privacy policies for how they handle that information. We can see, through ExtensionPay, the email address, subscription status and payment dates of our customers, and use them only to provide and support the subscription.
The extension requests delegated permissions only, meaning it acts as the signed-in administrator and never has more access than that person. They are used solely to provide the features you use: reading and managing users, groups, devices, apps, mail settings, reports and service health. The full list is shown in the extension's setup guide.
identity is used for Microsoft sign-in. The extension also runs a small script on extensionpay.com pages so the payment page can tell the extension that a purchase completed. storage keeps the settings above. contextMenus and alarms provide a right-click search and a periodic service-health badge check.
The extension contains no analytics, telemetry, advertising or tracking, and loads no remote code. The only services it contacts are Microsoft's sign-in and API endpoints and, for licensing, ExtensionPay.
Sign out in the extension, or remove the app under Entra admin centre > Enterprise applications. Uninstalling the extension deletes its local data.
The extension is a business tool and is not intended for children.
If this policy changes, the updated version will be posted here with a new date.
stevesupport3003@gmail.com