Privacy Policy link prominent on store listing and within extension options
Why it matters
Chrome Web Store policy mandates a privacy policy link for any extension that collects user data — failure to provide one is a direct cause of rejection or takedown. Beyond the store requirement, GDPR Art. 13 requires controllers to provide privacy information at the point of data collection, and CCPA §1798.100 requires consumers to be informed of data practices before collection. An extension that buries its privacy policy or omits it entirely prevents users from exercising their GDPR rights to access, correction, and erasure. Prominent, accessible disclosure is the first signal that a developer takes user privacy seriously.
Severity rationale
High because missing or inaccessible privacy policy links are a direct Chrome Web Store policy violation that triggers removal — and they prevent users from exercising GDPR and CCPA data rights they are legally entitled to.
Remediation
Add the privacy policy link to both required locations. In your extension's options.html or popup.html:
<footer>
<a href="https://example.com/privacy" target="_blank" rel="noopener noreferrer">
Privacy Policy
</a>
</footer>
In your Chrome Web Store listing description, include a direct markdown link:
Learn about our data practices: https://example.com/privacy
Both links must resolve to the same policy and must be clearly labeled — not embedded in small print or accessible only through a "More" toggle. Cross-reference the data-sharing-disclosed and retention-periods checks to ensure the linked policy is substantively complete.
DetectionPro
The detection method for this pattern is part of AuditBuffet Pro.
The full method (what to look for, pass and fail conditions, and how results get reported) ships inside the Extension Data Privacy Audit. The pattern definition, severity rationale, and remediation remain openly licensed under CC-BY-4.0.
External references
- gdpr · Art. 13 — Information to be provided where personal data are collected
- ccpa · §1798.100 — Right to know — notice at or before collection
- external · chrome-web-store-user-data-policy — Chrome Web Store User Data Privacy Policy — Privacy policy required in store listing
Taxons
History
- 2026-04-18·v1.0.0·Initial import from extension-data-privacy·automated