PRIVACY POLICY FOR MOOMOO.IO MOD - HAT HOTKEYS, AUTO-HEAL & AUTO-TRAP
Last Updated: October 2026
1. Overview & Commitment to Privacy
"MooMoo.io Mod - Hat Hotkeys, Auto-Heal & Auto-Trap" ("the extension", "we", "our") is an independent client-side tactical companion tool created for players of MooMoo.io. We are committed to complete transparency and user privacy.
This extension operates entirely locally within your browser. We DO NOT collect, store, sell, track, or transmit any personal data, gameplay credentials, IP addresses, or browsing history.
2. Information Handling and Data Storage
• Zero Personal Data Collection: The extension does not collect names, email addresses, passwords, IP addresses, or gaming account data.
• Local Storage Only: All user configurations (such as custom keybindings for hats, Auto-Heal percentage thresholds, and HUD display preferences) are stored strictly on your local computer using the browser's local storage API (`chrome.storage.local`). This data is never sent to external servers or third parties.
• No Tracking or Telemetry: The extension does not include Google Analytics, telemetry scripts, advertising trackers, or external network requests.
• No Third-Party Data Sharing: Because no data is collected, no data is ever shared, monetized, or transferred.
3. Detailed Permissions Breakdown & Explanations
To deliver its in-game tactical features and HUD, the extension requests only the following minimal permissions:
• "storage":
Purpose: Enables saving your preferences locally on your machine (e.g., your customized keybinds for Soldier Hat, Tank Gear, Turret Hat, Auto-Heal toggles, and health thresholds).
How it protects you: The data is confined to your browser's private local extension storage and never leaves your computer.
• Host Permissions ("*://moomoo.io/*", "*://*.moomoo.io/*", "*://dev.moomoo.io/*", "*://sandbox.moomoo.io/*"):
Purpose: Restricts extension script execution strictly to official MooMoo.io game pages and developer sandboxes. This permission is required to listen for hat hotkeys (F, G, H), monitor the health bar for Auto-Heal, and render the tactical HUD overlay.
How it protects you: The extension is strictly blocked from running on any other website (such as email, banking, social media, or search engines).
--------------------------------------------------------------------------------
ARE ALL THESE PERMISSIONS DEFINITELY NECESSARY? (LEAST PRIVILEGE AUDIT)
--------------------------------------------------------------------------------
YES. Every single permission requested by this extension represents the absolute minimum necessary ("Principle of Least Privilege") to perform its declared functions:
1. Can we remove "storage"?
No. If "storage" were omitted, your customized hotkeys, toggle states, and heal slider thresholds would be erased every time you close the popup or restart Chrome. Local storage is the standard, secure way to keep your settings persistent without needing a remote database.
2. Is "activeTab" requested?
No! We deliberately do NOT request "activeTab". Since the extension already specifies MooMoo.io in its host permissions, requesting "activeTab" would be completely redundant. By omitting "activeTab", the extension remains even more lightweight and privacy-preserving.
3. Can we remove Host Permissions ("*://*.moomoo.io/*")?
No. Because this is a game helper mod, the extension must inject content scripts into the game canvas to detect health, equip hats via hotkeys, and display the HUD. However, our host permissions are strictly scoped to "moomoo.io" and its immediate sandbox subdomains. The extension CANNOT inspect, read, or modify any other web pages you visit.
PERMISSIONS WE DELIBERATELY DO NOT REQUEST:
❌ NO "activeTab" — Redundant and omitted for cleaner security.
❌ NO "<all_urls>" or broad web access — Only moomoo.io is accessible.
❌ NO "cookies" — We do not read or touch authentication cookies or session tokens.
❌ NO "webRequest" or "declarativeNetRequest" — We do not intercept or monitor your network traffic.
❌ NO "identity" — We do not request your Google account or email profile.
❌ NO "history" — We cannot view your browsing history.
❌ NO external remote scripts — All extension code is 100% packaged inside the extension archive.
4. User Rights and Controls
You maintain full control over the extension at all times:
• You can modify or reset your settings to default at any time via the popup.
• You can disable or uninstall the extension instantly through Chrome's Extensions Manager (`chrome://extensions`).
5. Changes to this Policy
Should any minor updates occur (such as adding optional keybindings or support for new game hats), this privacy policy will be updated accordingly. The commitment to zero data collection will never change.
6. Contact
If you have any questions or feedback regarding this privacy policy, please reach out via the Chrome Web Store extension support page.