Messege from Chrome Web Store Team

[Mr53]

Hi all, 

I got this message from the Chrome web store Team 

Not sure what I need to do with " encryption, when handling personal and sensitive information"?

Do I need to use HTTPS or SSL on sites that use login?

Thank

"Dear Developer,

We recently announced a policy change aimed at enhancing user transparency and choice over how users’ personal data is handled. Please review the additional language on Developer Program Policy under the section “User Data Privacy.”

The new policy requires Web Store Developers to:

• Disclose their privacy practices for all types of data

• Post a privacy policy and use encryption, when handling personal and sensitive information, and

• Ask users to consent to the collection of personal or sensitive data via a prominent disclosure, when the use of the data isn’t related to a prominent feature.

If required, you must post the privacy policy in the Developer Dashboard.

The User Data Policy also has other requirements, including a new prohibition on the collection of web browsing activity when it’s unrelated to an item’s main functionality. We’ve also prepared a FAQ.

We'll be notifying developers when we discover items that violate the User Data Policy, and they'll have until July 14, 2016 to make any changes. Starting July 15th, 2016, items that violate the policy will also be removed from the Web Store and will need to become compliant to be reinstated.

Thank you,

Chrome Web Store Team"

[Antony Sargent]

That means that if you transmit data that could be considered personal/sensitive (eg something like some or all of the URLs/hostnames of sites a user browses to), you should do so over an encrypted transmission channel. So for example if your extension is sending that kind of data to a server, you should be doing that over https and not plain http. 

--
You received this message because you are subscribed to the Google Groups "Chromium-Extensions-Announce" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To post to this group, send email to chromium-...@chromium.org.
Visit this group at https://groups.google.com/a/chromium.org/group/chromium-extensions/.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/e78cc940-06b1-4575-97dc-bb28bbe18412%40chromium.org.
For more options, visit https://groups.google.com/a/chromium.org/d/optout.