PRIVACY POLICY FOR EVOWORLD.IO MEGAHACK (FLYORDIE MOD MENU)
Last Updated: October 2026
1. Overview & Commitment to User Privacy
"EvoWorld.io MEGAHACK" ("the extension", "we", "our") is an independent client-side tactical companion and mod utility developed for players of EvoWorld.io (FlyOrDie.io). We are firmly dedicated to user privacy, data security, and full transparency.
This extension operates entirely locally within your web browser. We DO NOT collect, harvest, transmit, sell, or share any personal data, gameplay credentials, account passwords, IP addresses, or browsing history.
2. Information Handling and Data Storage
• Zero Personal Data Collection: The extension does not collect names, email addresses, passwords, IP addresses, session tokens, or payment details.
• Local Storage Only: All user configurations (such as Night Vision preferences, Auto-Clicker clicks-per-second, custom keybinds, and Fast Mode toggles) are saved strictly on your local computer using the browser's local extension storage API (`chrome.storage.local`). This information never leaves your personal device and is never sent to external cloud servers.
• No Third-Party Tracking or Telemetry: We do not integrate Google Analytics, advertising pixels, user telemetry scripts, or external network trackers.
• No Remote Hosted Code: In accordance with Chrome Web Store Manifest V3 guidelines, all JavaScript, CSS, and HTML assets are 100% packaged locally inside the extension. The extension never downloads executable code from external websites or repositories.
3. Detailed Permissions Breakdown & Purpose
To deliver its in-game tactical interface and automation features, the extension requests only two minimal, strictly scoped permissions:
• "storage":
Purpose: Used exclusively to save and restore your customized settings (e.g. Night Vision toggle, custom CPS rate, and keybindings) across browser sessions.
Privacy Protection: Storage access is sandboxed to the extension itself; no external websites or third parties can access this data.
• Host Permissions ("*://evoworld.io/*", "*://*.evoworld.io/*", "*://flyordie.io/*", "*://*.flyordie.io/*"):
Purpose: Restricts extension script execution strictly and exclusively to official EvoWorld.io and FlyOrDie.io web addresses. This permission is necessary to inject the in-game HUD overlay, hook camera wheel zoom handlers, and enable night vision in game caves.
Privacy Protection: The extension is strictly prohibited from running on, reading, or interacting with any other website you visit (such as search engines, social media, online banking, or personal email).
--------------------------------------------------------------------------------
ARE ALL OF THESE PERMISSIONS DEFINITELY NECESSARY? (LEAST PRIVILEGE AUDIT)
--------------------------------------------------------------------------------
YES. Every permission requested by this extension represents the absolute bare minimum required ("Principle of Least Privilege") to perform its declared functions:
1. Can we remove "storage"?
No. If "storage" were omitted, every single customized keybind, auto-clicker CPS setting, and toggle choice would be wiped out every time you close the popup or reload the game tab. Local storage is the industry-standard, privacy-preserving method to keep your preferences saved on your machine without relying on a remote database.
2. Can we remove Host Permissions ("*://evoworld.io/*", "*://*.flyordie.io/*")?
No. Because this is an in-game helper utility, the extension must inject content scripts into the game canvas to provide Night Vision (neutralizing cave darkness), enable smooth camera zoom, and render the tactical HUD menu. However, notice how tightly restricted these permissions are: they apply ONLY to evoworld.io and flyordie.io domains.
3. Why is "activeTab" NOT requested?
We deliberately do NOT request "activeTab". Since our host permissions are already explicitly targeted to the game domains, adding "activeTab" would be completely redundant. By eliminating "activeTab", we maintain the leanest and safest permission profile possible.
PERMISSIONS WE DELIBERATELY DO NOT REQUEST:
❌ NO "<all_urls>" or broad web access — The extension can NEVER see other websites.
❌ NO "activeTab" — Omitted as redundant to reduce attack surface.
❌ NO "cookies" — We never read or touch authentication cookies or session credentials.
❌ NO "webRequest" or "declarativeNetRequest" — We do not intercept or monitor your network traffic.
❌ NO "identity" — We do not access your Google profile or account details.
❌ NO "history" — We cannot view or monitor your browsing history.
❌ NO external remote script loading — 100% of the code runs offline from local extension files.
4. User Rights and Controls
You maintain total control over the extension at all times:
• You can toggle individual features on or off directly through the popup or the in-game menu.
• You can reset all configurations to their original defaults with a single click using the "Reset Defaults" button in the popup.
• You can temporarily disable or permanently remove the extension at any time via Chrome's Extensions Management page (`chrome://extensions`).
5. Updates to this Policy
Should future browser updates or game patches require minor maintenance, this privacy policy will be updated accordingly. Our core commitment to zero data collection, zero telemetry, and complete user security will remain absolute.
6. Contact & Support
If you have any questions, suggestions, or concerns regarding this privacy policy, please submit an inquiry through the official Chrome Web Store extension support page.