https://blog.chromium.org/2020/11/transparent-privacy-practices.html
I understand now that Google has decided to brand certain extensions that don't meet its requirements. Does this finally mean that you're planning to give users a choice? Meaning, can a user decide whether he wants to download a certain extension although Google has branded it as "problematic" or do you intend to kickoff extensions that don't fill out your disclosure form?"For developers who have not yet provided privacy disclosures by January 18, 2021, a notice will be shown on their Chrome Web Store listings to inform users that the developer hasn’t certified that they comply with the Limited Use policy yet. "Thanks--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/c786deb1-f947-4343-9a79-30864c77ca76n%40chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/CAAgdh1JJhKRK7oWxUPi7a6-6T1Gy3eP4bm%2BaBHxuTHKNTtEqAw%40mail.gmail.com.
It still might be worthwhile mentioning specific functions are stored locally for the function of the extension, however this isn't subject to the same mandatory requirements spelled out in the Limited Use Policy.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/CAAgdh1K85h7-4W07cXH4kaG8BS-V5QYSQBv0TQNmuOgz-eQE3Q%40mail.gmail.com.
Also, what is the point of issuing a new policy, saying it will come into effect in January but now allowing to update extensions now unless you agree to it?
What if I need to update my extension's privacy policy as an Indie developer (which so happen to be the case) in order to comply with the new policy and I don't own a battery of lawyers like Google does.
Does this mean I can't update my extension until I raise enough capital to have my Privacy Policy reviewed by a law firm?Why aren't you thinking of the little guys? We are not all Billionaires...
what is the point of issuing a new policy, saying it will come into effect in January but not allowing to update extensions now unless you agree to it?
…can a user decide whether he wants to download a certain extension although Google has branded it as "problematic" or do you intend to kickoff extensions that don't fill out your disclosure form? - Charlie
I have a simple question. What does "collect" mean? - Jackie
If your Product handles personal or sensitive user data that is not closely related to functionality described prominently in the Product's Chrome Web Store page and user interface, then prior to the collection, it must:
Thanks for your supplement. Local data (chrome.storage, localstorage, indexeddb, cachestorage, websql) if only saved locally, and don't send to server, that means the extension don't "collect data". - Jackie
Also, what is the point of issuing a new policy, saying it will come into effect in January but not allowing to update extensions now unless you agree to it? - Charlie
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/CAAgdh1J%3DTdu3SVukyX9jygnGETw9nwgF-kwk8Y%3Dz3%2BLdLWyPGg%40mail.gmail.com.
What does "handle" mean in the User Data Policy? What are some common ways a Product handles personal or sensitive user data?
Generally, by "handle" we mean collecting, transmitting, using, or sharing user data.
What does "collect" mean?
In short, we're referring to any data that an extension accesses. - Simeon
Jackie, I think the interpretation you and Deco discussed is most likely accurate. My main hesitation is that "collect" might be interpreted as including data stored locally on the user's device. For example, if your extension were to display a historical chart of when the user performed certain activities, the extension would need to gather and store that information somewhere. I think "collect" would be a fitting verb to describe that process. I'll have to look into and follow up on this.
More broadly, though, I'm glad we're having these conversations now. We do our best to anticipate the questions folks will ask or possible areas of confusion, but obviously there are gaps. I expect that we will iterate on our supplementary docs and possibly the CWS UI to make what we're asking for clearer. I anticipate that in the coming days I'll be sharing updates about and asking for feedback on revisions of these resources.
If you don't send the data anywhere outside the user's computer, then that data is not being "collected".That's the only reasonable interpretation of the verb "to collect" in the context of user privacy.
Q: storing user data using chrome.storage.sync API
A: This requires a disclosure because the information is leaving the user's device.