Privacy Policy for CA Header

1. Introduction

Welcome to CA Header. This extension is developed by [Your Name or Your Company Name]. We are committed to respecting and protecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our extension. Please read this policy carefully.

By installing and using CA Header, you agree to the terms of this Privacy Policy. If you do not agree, please uninstall and cease use of the extension.

2. Information We Collect

Our guiding principle is to collect only the minimum amount of data necessary to provide the service and improve the extension.

We do not collect or store personal browsing data. CA Header is a development tool and does not spy on your traffic. It is only authorized to modify headers according to rules you explicitly create.

We collect data in two main categories:

A. User-Provided Configuration Data

When you configure CA Header, you create "rules" to modify headers. This data includes:

• Header Names and Values: (e.g., Authorization, Custom-User-Agent, and the corresponding values you set).
• Target URLs: The domain names or URL patterns you specify for these rules to apply to.
• Profile Names: The names you give your configurations.

This data is stored locally within your browser using chrome.storage.local. We do not have access to this data. It never leaves your device unless you choose to use your browser's built-in "sync" functionality (e.g., Chrome Sync), which encrypts the data during transfer.

B. Anonymous Technical Usage Data (Optional and Aggregate)

To improve the extension, we may collect anonymous, aggregated usage data. This is typically collected via a service like Google Analytics or a similar tool. This data is not linked to your personal browsing or specific rules you create.

This data includes:

• Extension version installed.
• Total number of active users (non-identifiable).
• Frequency of extension features used (e.g., how often profiles are switched).
• Anonymized error logs (to help fix crashes).

We utilize this data solely to understand extension performance and user engagement.

3. Permissions Justification (How We Use Permissions)

To perform its core function, CA Header requires specific permissions from your browser. We only use these permissions to provide the stated utility:

• declarativeNetRequest (and WithHostAccess): Used to efficiently modify HTTP request and response headers based on rules you create.
• storage: Used to save your header modification rules and profiles locally on your device.
• tabs: Used to detect the active tab's URL to apply filtering rules (e.g., 'apply only on test.com'). We only access the URL of the tab currently under development.

We never sell, rent, or trade these permissions, access personal browsing history, or share these permissions with third parties.

4. Disclosure of Your Information

We do not sell your data. We may only disclose anonymized, aggregate technical data (see 2B above) in limited circumstances:

• As Required by Law: To comply with legal processes or government requests.
• Analytics Partners: Anonymized technical usage data may be collected by our analytics partners (like Google) to provide us with performance metrics.

5. Security of Your Information

We take the security of your stored configuration data seriously. All configuration data is stored locally on your device using chrome.storage.local.

However, please be aware that the local storage is only as secure as your computer and browser. If your device is compromised, your configuration rules could be accessed.

We do not control data transmitted through your browser's "sync" feature (e.g., Chrome Sync), which is handled by your browser provider and is protected by their respective security policies.

6. Your Rights and Choices

• Uninstall: You may stop all collection of information by uninstalling the extension.
• Delete Configuration Data: You can delete all your configuration data at any time directly through the extension's settings/profile management UI.
• Opt-out of Analytics: If we utilize analytics collection, the extension will provide a clear setting in the menu allowing you to opt-out of anonymous usage data collection.

7. Children’s Privacy

CA Header is a developer tool and is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

info@cyberarts.com.hk