PRIVACY NOTICE: SKUDO BROWSER EXTENSION

Scope

This notice covers the Skudo browser extension only: what it accesses on your device and on the web, what it stores, and what it transmits. The extension is a client for the Skudo service. For how the service itself processes data, including your account, your aliases and their forwarding addresses, retention periods and your rights under GDPR, see the main privacy notice at https://skudo.org/legal/privacy, which governs your account in full and applies regardless of which client you use to reach it.

The controller for both the extension and the service is the operator of Skudo, identified in the main privacy notice. Contact for anything in this notice is privacy@skudo.org.

1. What the extension stores, and where

The extension stores the following in the browser's own local extension storage, on your device only:

• Your access token, to authenticate requests to your Skudo account.
• Your preferences: default alias domain and format, whether the in-field icon is enabled, and sites where suggestions are muted.
• A cache of site icons, to speed up the popup. It contains no personal data, only images already public on the web.

This storage is local, not synced. Synced browser storage is uploaded to Mozilla's or Google's own servers and copied to every browser where you are signed in. Since the access token would be included, syncing it would mean your token, and through it your full list of aliases, leaving your device. We do not use synced storage for this reason. As a consequence, your preferences and token do not carry over automatically between browsers or devices; each installation is configured separately.

Nothing described in this section is transmitted to us. We do not receive your preferences, your token, or your icon cache. They exist only on your device.

1. What the extension can read on a page

At install time, the extension has no access to the content of any page you visit. Two optional features request more access, and only once you turn them on.

a. The in-field icon. When enabled, a content script looks for signup and login fields on the page you are viewing, so you can create an alias without leaving it. It does not read, collect or transmit any other content of the page. It is disabled by default.

b. Site icons in the popup. The domain of a site you have an alias for is used, locally, to compute a cryptographic hash. That hash, not the domain itself in most cases, is what is used to look up an icon. See section 3 for how this lookup is designed to avoid revealing anything to the site in question.

1. What is sent, and to whom

The extension communicates with two destinations only, both operated by us:

1. app.skudo.org, to manage your aliases: create, view, disable or delete them, and to authenticate using your stored token.
2. Our icon cache, to retrieve a site's icon. The request goes to our own infrastructure, never to the site the icon belongs to, so that no third-party site is ever informed that a Skudo user is looking at it.

No data is sent to any other party. In particular, your forwarding address, the destination your mail is ultimately delivered to, is never requested by, transmitted to, or otherwise exposed to the extension in any form. The extension has no means of learning it.

1. Permissions requested, and why
2. Storage: to keep your token and preferences on your device, as described in section 1.
3. Scripting: to run the in-field icon feature on pages, only once you enable it.
4. Active tab: to create an alias for the site you are currently viewing, only when you act.
5. Context menus: to offer alias creation from the right-click menu.
6. Host access (optional): requested only if and when a feature that needs it is enabled; not granted at install.
7. Changes to this notice

Material changes to this notice will be announced in the extension's release notes and, where the change affects an active permission, will require your renewed consent before taking effect.

1. Your rights

Because the extension does not hold an independent copy of your personal data (everything it stores lives on your own device, and everything it displays is fetched live from your account), your rights of access, correction, erasure and portability are exercised against the Skudo service itself, as described in the main privacy notice at https://skudo.org/legal/privacy, section 7.