PRIVACY POLICY & PERMISSION AUDIT
Extension: Bloxd.io Mod Menu | Utility & Enhancement Suite
Version: 1.0.0
Last Updated: October 2026
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. INTRODUCTION & CORE PRIVACY COMMITMENT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Bloxd.io Mod Menu ("we", "our", or "the extension") is dedicated to protecting user privacy. We operate on a strict Zero-Data-Collection architecture. We believe that gaming enhancements should never come at the expense of your privacy or system security.
This document serves as our official Privacy Policy and includes a transparent technical audit explaining every permission requested and confirming why each is strictly necessary.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. AUDIT: ARE ALL REQUESTED PERMISSIONS STRICTLY NECESSARY?
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Yes. We have conducted a rigorous Principle of Least Privilege audit to ensure that NO unnecessary or invasive permissions are included in our manifest.
Here is the exact evaluation of our permissions:
A. "storage" Permission
• Why it is requested:
Used exclusively to store your preferred configuration locally within your browser. This includes:
- Custom keybindings (e.g. key for Left Click and Right Click)
- Desired CPS slider values (minCPS and maxCPS)
- Custom crosshair preset, color, size, or custom image URL
- Floating HUD window coordinates (so the menu stays where you dragged it)
• Could this permission be removed?
No. Without the "storage" permission, all your custom keybinds, crosshair designs, and CPS preferences would be erased every time you refresh or close Bloxd.io, requiring you to reconfigure them every single time you play.
• Privacy Impact:
Zero. All data stored is non-personal setting values stored 100% locally on your own machine. We have no access to this data.
B. Host Permissions ("https://bloxd.io/*", "https://*.bloxd.io/*")
• Why it is requested:
Under Chrome Extension Manifest V3, content scripts require host permission matching the exact gaming domain in order to:
- Inject the floating HUD menu and live CPS counter onto the game page.
- Listen to hotkeys (e.g. "R" and "F") during gameplay to trigger the auto-clicker.
- Apply custom crosshair styling to the in-game canvas.
- Automatically remove banner ads and orientation lock popups on Bloxd.io.
• Could this permission be removed or minimized further?
No. The permission is already maximally restricted:
- We DO NOT request broad permissions like "<all_urls>", "http://*/*", or "https://*/*".
- The extension is strictly sandboxed to only run on "https://bloxd.io/*". It has zero capability or permission to interact with any other websites you visit (such as social networks, emails, banking, or search engines).
• Privacy Impact:
Zero. The extension only executes client-side game enhancements when you are actively on Bloxd.io.
C. PERMISSIONS WE DELIBERATELY DO NOT REQUEST (AND NEVER WILL):
• "tabs" — NOT requested (we don't read your browsing history or open tabs).
• "cookies" — NOT requested.
• "webRequest" — NOT requested (we do not inspect your network traffic).
• "<all_urls>" — NOT requested (we are locked exclusively to bloxd.io).
• "identity" or "geolocation" — NOT requested.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. INFORMATION COLLECTION & USE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
• Personal Information:
We DO NOT collect, harvest, store, or transmit any Personally Identifiable Information (PII) such as your name, email, IP address, browsing activity, or device identifiers.
• Game Credentials:
We DO NOT log or transmit your Bloxd.io usernames, passwords, chat messages, or payment details.
• Analytics & Telemetry:
The extension contains NO telemetry trackers, NO Google Analytics, NO advertising pixels, and NO remote tracking scripts. Everything runs completely offline within your browser tab.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. THIRD-PARTY DATA SHARING & TRANSFERS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
We do not sell, rent, trade, or transfer any data to third parties. Because no data is collected, no data can ever be shared, leaked, or monetized.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. DATA RETENTION & REMOVAL
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
All user preferences are stored in Chrome's local storage area (`chrome.storage.local`). You have full control over this data:
• You can reset all preferences anytime via the extension popup or by clicking "Reset Menu".
• Uninstalling the extension permanently and immediately erases all stored configuration files from your browser.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
6. CHANGES TO THIS PRIVACY POLICY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
If we update the extension with new features that alter permission scope, we will notify users through our release notes and update this policy prior to release.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
7. DEVELOPER CONTACT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
If you have any questions or security feedback regarding this extension, please reach out via our community project page on GreasyFork or GitHub.