Extension Data Privacy Audit

extension-data-privacy · v1.1.0 · paid

Assesses data collection practices, privacy disclosures, storage security, third-party data sharing, and compliance with browser store privacy requirements.

Data Collection Practices

data-collection · weight 0.3

Explicit user consent obtained before collecting any PII
ab-001299
critical
No sensitive fields captured from DOM without user interaction
ab-001300
critical
Authentication tokens stored securely, not exposed in localStorage
ab-001301
critical
Data collection limited to minimum necessary for stated functionality
ab-001302
high
Background scripts do not persistently log full browsing history
ab-001303
high

Privacy Disclosures

privacy-disclosures · weight 0.3

Privacy Policy link prominent on store listing and within extension options
ab-001304
high
Permission justification in manifest matches actual feature usage
ab-001305
high
Policy explicitly states whether data is sold or shared with third parties
ab-001306
high
Any PII stored locally is encrypted
ab-001307
high
Internal help text explains why specific permissions are requested
ab-001308
info
No unauthorized external script injection occurs
ab-001309
high

Storage Security

storage-security · weight 0.25

Users can opt-out of optional telemetry or usage statistics
ab-001310
medium
Clipboard access only triggered by explicit user action
ab-001311
medium
chrome.storage.sync not used for unencrypted passwords or secrets
ab-001312
medium
External API calls containing user data use HTTPS/TLS 1.2+
ab-001313
medium

Third-Party Data Sharing

third-party-sharing · weight 0.15

Privacy Policy clearly details data retention periods
ab-001314
low
Contact mechanism provided for privacy-related inquiries
ab-001315
low
Debug logs do not output sensitive user data to console
ab-001316
low
Temporary data caches cleared when user logs out or uninstalls
ab-001317
low
Third-party analytics services disclosed to the user
ab-001318
low