mirror of
https://github.com/yaklang/yaklang-chrome-extension.git
synced 2026-09-26 21:21:53 +08:00
Update project structure and dependencies; add architecture documentation and improve build scripts. Introduce new versioning and permissions for enhanced functionality.
This commit is contained in:
@@ -0,0 +1,14 @@
|
||||
# Limited Use Disclosure
|
||||
|
||||
Yakit Browser Agent handles browsing activity, website content, authentication information, Cookie/browser-storage data and selected network request data only to provide its prominently disclosed authenticated-browser security-testing features.
|
||||
|
||||
The extension's use of this data complies with the following commitments:
|
||||
|
||||
- Data is used only to display browser context to the user, execute the user's bounded security workflow, or transmit an explicitly granted operation to the user's local Yak/Yakit engine.
|
||||
- Data is not sold or transferred for advertising, marketing, creditworthiness, lending, or unrelated profiling.
|
||||
- Humans do not read user data except when the user deliberately includes a redacted diagnostic artifact in a support request, or when required for security, abuse prevention or law.
|
||||
- There is no developer-operated telemetry endpoint. Aggregate operational metrics remain on device.
|
||||
- Sensitive request fields and observation values are off by default. Cookie exports are redacted by default. Program Eval has a separate high-risk scope.
|
||||
- The local Native Host receives only the same purpose-bound messages the user authorized; it is not an independent data collector.
|
||||
|
||||
Store privacy-form answers, listing text and the hosted privacy policy must remain consistent with this disclosure and actual packaged behavior. See the [Chrome Limited Use guidance](https://developer.chrome.com/docs/webstore/user_data) and [Mozilla Add-on Policies](https://extensionworkshop.com/documentation/publish/add-on-policies/).
|
||||
Reference in New Issue
Block a user