Users can opt-out of optional telemetry or usage statistics

GDPR Art. 7(3) grants users the right to withdraw consent at any time; CCPA §1798.120 gives users the right to opt out of data collection. An extension that enables telemetry or analytics with no opt-out mechanism denies users these rights by design. The ePrivacy Directive Art. 5(3) specifically covers tracking mechanisms in software — non-essential analytics require prior consent in the EU. Chrome Web Store policy reinforces this: data collected beyond core functionality must be disclosed and controllable. Extensions with hidden or irremovable analytics are a frequent source of negative reviews and one-star ratings that permanently damage store placement.

Add a clearly labeled telemetry toggle to your options.html, defaulting to disabled:

<label>
  <input type="checkbox" id="optInTelemetry" />
  Share anonymous usage data to help improve this extension
  <a href="/privacy#analytics" target="_blank">(what we collect)</a>
</label>

Gate every analytics call behind the stored preference:

chrome.storage.local.get(['optInTelemetry'], ({ optInTelemetry }) => {
  if (optInTelemetry === true) {
    analytics.track('feature_used', eventData);
  }
});

Never send analytics on the first run before the user has seen and set the toggle. Cross-reference analytics-disclosed to ensure whatever you do send is named in the privacy policy.

• ID: telemetry-opt-out

• Severity: medium

• What to look for: Examine options page for a toggle or setting to disable optional telemetry, analytics, or usage statistics. Check whether the default is opt-in (user must enable) or opt-out (enabled by default with option to disable). Look for clear labeling of what data is collected if telemetry is enabled.

• Pass criteria: Count all telemetry or analytics calls in the codebase. A toggle exists in options to enable/disable optional telemetry. Default is opt-in (disabled by default, user can enable if desired). At least 100% of optional telemetry calls must check the user preference before sending. If telemetry is enabled by default, a clear opt-out mechanism is prominent.

• Fail criteria: Optional telemetry or analytics are always active with no way to disable. No settings provided. Required telemetry is not clearly separated from optional.

• Skip (N/A) when: The extension does not collect any telemetry or analytics data beyond what is strictly necessary for core functionality.

• Detail on fail: Describe the telemetry and opt-out issue. Example: "Google Analytics enabled by default with no option to disable in settings" or "Usage statistics collected and sent to external service with no user control or notification."

• Remediation: Add an opt-out toggle to your options page:

  <label>
    <input type="checkbox" id="optInTelemetry" />
    Help improve this extension by sharing anonymous usage data
  </label>
  

  Then check the flag before sending:

  chrome.storage.local.get(['optInTelemetry'], (result) => {
    if (result.optInTelemetry) {
      analytics.track('feature_used');
    }
  });