# PRIVACY POLICY – KOUR.IO MOD MENU & UI ENHANCER
Last Updated: October 16, 2026
This Privacy Policy explains how "Kour.io Mod Menu & UI Enhancer" ("the Extension", "we", "our") handles user information and explains the technical permissions requested by the extension. We are strictly committed to user privacy, data minimization, and transparency.
================================================================================
1. SUMMARY OF OUR PRIVACY PRINCIPLES
================================================================================
• We collect ZERO personal data.
• We do NOT track, record, analyze, or transmit your browsing activity.
• We do NOT run external analytics, trackers, cookies, or remote telemetry.
• All configuration settings and gameplay toggles are stored 100% locally on your machine.
• The extension operates entirely offline/client-side within your browser.
================================================================================
2. PERMISSIONS EXPLAINED: WHAT THEY DO & WHY THEY ARE NEEDED
================================================================================
To deliver its advertised features, the Extension requests only two specific permissions in Manifest V3:
1) "storage"
• Purpose: This permission allows the extension to remember your preferences (such as whether Invisible Mode, Instant-Kill, or the HUD Watermark is enabled/disabled) between browser restarts.
• Data Handled: Simple boolean flags (true/false) saved exclusively in your browser's local sandbox (`chrome.storage.local`).
• Access Scope: Local storage only. No cloud syncing or external transmission occurs.
2) "*://kour.io/*" (Host Permission)
• Purpose: This permission allows the extension's content scripts to execute solely on the official Kour.io game domain (https://kour.io).
• Action: Injects the floating in-game mod menu, the canvas HUD watermark overlay, and hooks into the game's WebSocket stream to inspect and filter gameplay packets.
• Access Scope: Restricted strictly to `kour.io`. It cannot read, modify, or interact with any other website, tab, or domain.
================================================================================
3. ARE ALL THESE PERMISSIONS TRULY NECESSARY?
================================================================================
YES, and this configuration represents the absolute minimum viable set of permissions required under Google Chrome Web Store's Principle of Least Privilege:
• Could we remove "storage"?
Without `storage`, every time you refresh Kour.io or restart Chrome, all your mod settings, hotkey bindings, and HUD toggle preferences would be lost and reset to defaults. `storage` is strictly needed to provide a seamless user experience.
• Could we remove "*://kour.io/*"?
Without host permissions for `kour.io`, Chrome would block the extension from injecting the floating menu, the on-screen canvas watermark, and the packet filter into the game. The extension would have zero ability to function.
• What permissions were intentionally NOT requested?
To guarantee maximum security and user trust, we strictly avoid broad, invasive permissions:
- NO `<all_urls>` permission: We never ask for access to all websites.
- NO `cookies` permission: We cannot read or modify your authentication cookies or session data.
- NO `history` or `tabs` permissions: We have no access to your browsing history or open tabs.
- NO `webRequest` or `declarativeNetRequest` permissions: We do not intercept or inspect external HTTP traffic.
- NO remote script hosting: All code is bundled inside the extension package for CWS review.
================================================================================
4. DATA COLLECTION & TELEMETRY
================================================================================
• Personal Data: None collected. We do not ask for or collect names, emails, IP addresses, credentials, or hardware IDs.
• Game Credentials: None collected. Your Kour.io accounts and passwords remain private and are never touched.
• Analytics & Tracking: None. No Google Analytics, Mixpanel, Sentry, or third-party beacon libraries are embedded.
================================================================================
5. THIRD-PARTY SHARING
================================================================================
Because we do not collect any user data, we have nothing to sell, lease, transfer, or disclose to any third parties, advertisers, or affiliates.
================================================================================
6. SECURITY & USER CONTROL
================================================================================
• You have full control over the extension at all times.
• You can reset all saved settings at any moment by clicking "Reset" or uninstalling the extension via `chrome://extensions`.
• All source code is unminified, readable, and open to inspection.
================================================================================
7. CONTACT & INQUIRIES
================================================================================
If you have any questions, feedback, or concerns regarding this Privacy Policy or the security of the extension, please reach out via our official Chrome Web Store support page or project repository.