Overview:
Smart IP AutoFill helps you fill intellectual-property complaint forms. It runs
entirely on your device. This policy describes exactly what it stores and what it
does not do.
What is stored:
Stored locally in chrome.storage.local, on this device only:
Profiles: the form fields you explicitly choose to capture and save,
together with the profile name, the hostname you captured on, and a timestamp.
Settings: your extension preferences.
A device key: a random value used to encrypt profile contents at rest.
A migration marker: records that the one-time upgrade from a pre-2.0
version has run.
A pending selection: when you press Use this profile in the library, the
profile's name is held until the popup reads it, then removed. Nothing else
about the profile is duplicated.
What is never stored
Passwords
URLs you paste
Browsing history, page contents beyond the form you explicitly capture, or any
identifier about you.
What is never transmitted
The extension makes no network requests of any kind. There is no server, no
analytics, no telemetry, and no third party. Data is not sold or shared.
Your profiles do not sync between devices. Everything uses local storage.
The single exception is a one-time read of Chrome sync storage during the upgrade
from a pre-2.0 version, to recover profiles that a much older build may have
written there. Nothing is ever written to sync storage.
How data is used
Data is used solely to fill forms you ask it to fill. Content scripts are
injected into the active tab only when you click something in the popup. There is
no background monitoring.
Security
Profile contents are encrypted at rest using AES-GCM via the Web Crypto API,
with a random per-device key.
Scope of that protection the key is stored in the same local extension
storage as the ciphertext. This protects against casual inspection of the
stored profile blob. It does not protect against software that can already read
this extension's storage. We state this plainly rather than implying stronger
protection than exists.
If the device key cannot be written, the profile is saved unencrypted rather
than encrypted under a key that would be lost.
Extension pages run under a strict Content Security Policy that forbids remote
scripts and outbound connections.
Export and import
You can export your profiles to a file and import them back, so your data is not
trapped on one machine.
Import never overwrites: a profile whose name already exists is added alongside
the existing one rather than replacing it.
Retention and deletion
Profiles remain until you delete them or uninstall the extension. Deleting a
profile removes it immediately; deleting your last profile also purges any legacy
copies left behind by older versions. Uninstalling removes all extension storage.
Permissions
activeTab: temporary access to the current page, only after you act in the
popup.
scripting: inject the content engine on demand.
Storage: save profiles and settings locally.
Chrome Web Store data disclosure
No Data collected
No Data shared with third parties
No Data sold
Purpose: on-device functionality only
User can delete data
Contact: rcham.sok@gmail.com