Privacy policy

[אולה יאסינובי‎]

Hello

We developed a radio exstension with live radio stream.

After trying 2 times to download it to the store we got rejection because of this reason:

• If your Product handles personal or sensitive user data, then your Product must post a privacy policy. (learn more)

What can be the sensitive user data we have ? 

Will appreciate any help.

Thanks.

[PhistucK]

Without seeing code, it is pretty hard to tell, but are you loading external pages (for example, a page that contains HTML/JavaScript/CSS that shows the player/streams)?

If so, they might store/read cookies and so on. Cookies probably need a privacy policy.

☆PhistucK

--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/3776bc56-c707-4fb0-9020-469b9c9bc800n%40chromium.org.

[אולה יאסינובי‎]

Hi all

We have been rejected for 3 times already, we do not handle any delicate information and not external codes.

Here is our manifest I will be happy to any help with this w don't know what else to do the extension is only playing radio

{

  "name": "כאן",

  "version": "1.0",

  "description": "Listen in background to Kan channels",

  "manifest_version": 2,

  "browser_action": {

    "default_title": "כאן - תחנות רדיו בישדור חי",

    "default_popup": "index.html"

  },

  "background": {

    "scripts": ["analytics.js", "jquery-3.5.1.min.js", "background.js"]

  },

  "content_security_policy": "script-src 'self' https://www.google-analytics.com; object-src 'self'",

  "permissions": [

    "https://*.kan.org.il/",

    "alarms"

  ],

  "icons": {

    "16": "icons/main/16.png",

    "48": "icons/main/48.png",

    "128": "icons/main/128.png"

  }

ב-יום ראשון, 27 בדצמבר 2020 בשעה 13:18:00 UTC+2, PhistucK כתב/ה:

[Browser Extenstion]

Try to change:

"permissions": [

    "https://*.kan.org.il/*",

    "alarms"

  ],

[Jackie Han]

Hi,

If your Product handles personal or sensitive user data, then your Product must post a privacy policy. 

For this rejected statement, because you use host permission, you need to add a privacy policy link in CWS developer dashboard ( Account -> profile -> privacy policy).

--

You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/3776bc56-c707-4fb0-9020-469b9c9bc800n%40chromium.org.

--

韩国恺(Jackie)

[אולה יאסינובי‎]

what is host permission ? we do not handle any peroneal or sensitive data...

ב-יום רביעי, 30 בדצמבר 2020 בשעה 08:52:22 UTC+2, Jackie Han כתב/ה:

[Jackie Han]

  "permissions": [
    "https://*.kan.org.il/"
  ],

Above is a host permission, so you can access that site's data (not limited by CORS).  Also, you use "analytics.js". So you need to add a privacy link. Privacy policy is a statement, that you publicly tell people that you do not handle any personal or sensitive data.

--

韩国恺(Jackie)

[אולה יאסינובי‎]

Thank you all- we tried and again we was rejected not the reason is that we link to a page which is not a privacy policy so I have question :

1- We removed the Analytics do we still need a privacy policy as we do not handle any information 

2- Is the privacy policy need to be in English or local language

Thank you in advance.

ב-יום רביעי, 30 בדצמבר 2020 בשעה 09:01:16 UTC+2, Jackie Han כתב/ה:

[PhistucK]

Others have noted that since you use host permissions, which may have cookie interaction, you probably still need a privacy policy.

I would assume that it would be good if the privacy policy is served in every language that your extension supports (localized).

☆PhistucK

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/47194f07-d291-4f39-96fe-9f1a7d513c27n%40chromium.org.

[Jackie Han]

I just noticed that you are the owner of that website. Therefore, if you don't need to insert code when user visit it, you can set CORS header on your server to allow your extension to access its data, like this:

access-control-allow-origin: chrome-extension://your_extension_id

After adding this http header, you can remove the host permission.

Also you can verify you are the site owner on Google search console, this may help.

--

韩国恺(Jackie)

[אולה יאסינובי‎]

Hi all

Thanks for all your help 

Still with the same issue trying to verify our radio extension

We did have the console connected to the web site and we did published the privacy policy but still rejected and I don't really understand why

What next ?

Please help 

ב-יום שני, 4 בינואר 2021 בשעה 14:34:28 UTC+2, Jackie Han כתב/ה:

[PhistucK]

Did you try replying to the rejection e-mail?

After a few attempts, you might get a human response.

Also, make sure that the privacy policy URL is accessible outside of Israel.

☆PhistucK

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/4a9665b2-57a9-4118-80c9-60d8a3a393fcn%40chromium.org.

[Simeon Vincent]

Can you share the extension ID? With that I can look into this to see what exactly is going on with review.

Cheers,

Simeon - @dotproto

Chrome Extensions DevRel

[אולה יאסינובי‎]

Yes of course the id is  malcldkhojjdohmhhnognefoafofdaek 

  As I mention before it is a radio stream extension when the host permissions are our own because we own the site we use

We also added a full privacy policy (Hebrew+English versions) although I am not sure we handle any user sensitive or any information

I will be happy to any help with this in order to get confirmed 

Thanks!

Ola    

ב-יום שלישי, 12 בינואר 2021 בשעה 07:36:30 UTC+2, Simeon Vincent כתב/ה:

[Simeon Vincent]

As others suspected the problem is with your privacy policy. Document that you currently link to is your terms of use, not a privacy policy. 

Per Wikipedia, a "privacy policy is a statement or legal document (in privacy law) that discloses some or all of the ways a party gathers, uses, discloses, and manages a customer or client's data. … In the case of a business, it is often a statement that declares a party's policy on how it collects, stores, and releases personal information it collects. It informs the client what specific information is collected, and whether it is kept confidential, shared with partners, or sold to other firms or enterprises."

Cheers,

Simeon - @dotproto
Chrome Extensions DevRel

[אולה יאסינובי‎]

Thanks a lot for the answer 

  We added a privacy policy at the last version of the extension 

those are the links

Hebrew

https://www.kan.org.il/Item/?itemId=97736

English

https://www.kan.org.il/Item/?itemId=97737 

ב-יום שלישי, 12 בינואר 2021 בשעה 08:10:25 UTC+2, Simeon Vincent כתב/ה:

[Simeon Vincent]

It doesn't look like the privacy policy link has been updated, but I may be looking at stale data. Just in case, please verify that you've updated the privacy policy link in your developer dashboard. Changes on this page are not automatically saved – you will need to click the "Save changes" button at the bottom of the document to persist them.

Cheers,

Simeon - @dotproto

Chrome Extensions DevRel

[אולה יאסינובי‎]

Thank you sent it again

ב-יום שלישי, 12 בינואר 2021 בשעה 08:34:00 UTC+2, Simeon Vincent כתב/ה:

[אולה יאסינובי‎]

Oh no rejected again :((((((

• Ensure your privacy policy contains details about user data collection, handling, storage and sharing. Omission of any section is not allowed.

Please help me what we need to do , what can we do ? what are our options?

Our privacy policy have all the legal details

Thanks

ב-יום שלישי, 12 בינואר 2021 בשעה 16:21:15 UTC+2, אולה יאסינובי כתב/ה: