================================================================================
PRIVACY POLICY FOR SNAKESTORM
Last Updated: October 2026
================================================================================
1. INTRODUCTION & CORE PRIVACY COMMITMENT
SnakeStorm ("the Extension", "we", "us", or "our") is committed to protecting user privacy and ensuring full transparency regarding data handling.
Our privacy promise is simple and unconditional:
• We DO NOT collect, store, transmit, or sell any personal data.
• We DO NOT track your browsing activity, visited websites, or search queries.
• We DO NOT inject ads, third-party trackers, or analytics scripts.
• 100% OF EXTENSION LOGIC RUNS LOCALLY IN YOUR BROWSER.
2. HOW THE EXTENSION WORKS & DATA HANDLING
When you use SnakeStorm on Slither.io:
1. The extension coordinates bot swarm movement patterns and displays the floating in-game HUD entirely within the browser tab's local execution environment.
2. User preferences—such as your chosen default formation, custom keybinds, swarm size, and safety limiter settings—are saved locally on your device via the Chrome Storage API (`chrome.storage.local`).
3. No personal data, IP addresses, credentials, or game telemetry are ever transmitted to external servers.
4. The extension operates completely offline with respect to third-party services.
3. PERMISSIONS BREAKDOWN & WHY THEY ARE USED
To provide seamless swarm controls and HUD functionality on Slither.io, SnakeStorm requests only the absolute minimum required permissions:
• storage:
- Why it is used: Allows SnakeStorm to save your preferences (such as swarm size, formation mode, boost multiplier, custom hotkeys, and safe server threshold) locally on your machine.
- What it does NOT do: It does not store passwords, personal identities, or browsing history; it only stores your extension configuration preferences.
• host_permissions (*://slither.io/*, *://*.slither.io/*):
- Why it is used: Grants the extension permission to run the content script on Slither.io web pages. This is required to render the floating formation HUD, capture your keybindings (e.g., '=', '6', '7'), coordinate swarm movements, and inspect server player counts for the Safe Server Limiter.
- What it does NOT do: It is strictly restricted to Slither.io domains. It cannot access any other website you visit.
4. ARE ALL THESE PERMISSIONS TRULY NECESSARY?
YES. Every declared permission is strictly necessary for SnakeStorm to perform its core functions while strictly adhering to Google's "Principle of Least Privilege":
• Why host_permissions for *://slither.io/* only instead of <all_urls>?
Many lower-quality extensions request "<all_urls>" or "*://*/*", which grants access to every website a user visits. SnakeStorm deliberately avoids broad permissions and restricts its host access exclusively to `*://slither.io/*` and `*://*.slither.io/*`. The extension cannot run, read, or inject code into any other domain.
• Could we remove "host_permissions"?
No. Without host permission for Slither.io, the extension cannot inject the floating formation controller HUD, listen to in-game hotkeys, or enforce the safe server player limiter during gameplay.
• Could we remove "storage"?
Only if users were willing to reconfigure their swarm size, speed, and hotkeys from scratch every single time they close the browser. The "storage" permission ensures a seamless user experience.
• What permissions were explicitly OMITTED because they are NOT needed?
- NO "<all_urls>" or broad web access permissions
- NO "activeTab" (not needed since content script automatically syncs via storage changes)
- NO "tabs" permission (which would expose URLs of all open tabs)
- NO "webRequest" or network interception permissions
- NO "cookies" permission
- NO "geolocation" or location access permissions
- NO "identity" or Google account profile permissions
5. THIRD-PARTY SERVICES & ANALYTICS
SnakeStorm does not embed any external tracking SDKs, Google Analytics, telemetry beacons, or advertising networks. All CSS, JavaScript, and image assets are bundled locally inside the extension package.
6. COMPLIANCE WITH GOOGLE CHROME WEB STORE POLICIES
SnakeStorm fully complies with the Chrome Web Store Developer Program Policies, including:
• The Single Purpose Policy (controlling Slither.io bot swarms and formations).
• The Limited Use Policy (data is never transferred or sold).
• Manifest V3 security and privacy guidelines.
7. CONTACT & SUPPORT
If you have any questions, feedback, or concerns regarding this Privacy Policy or SnakeStorm, please submit an inquiry through the Chrome Web Store extension support tab or visit our documentation page.