This is not optional for PracticeDNA.

Mozilla specifically states that if information is transmitted from the user's device, the add-on needs a privacy policy explaining what is sent and how it is used.

The existing general Excellenc3 privacy policy discusses personal/application data, but it does not clearly and specifically explain PracticeDNA's browser workflow collection, website activity/content, or possible healthcare data. I therefore would not use the generic policy unchanged for this Firefox submission.

A PracticeDNA-specific policy/addendum should cover the following:

Policy area Required PracticeDNA disclosure
Identity information Name, email, BrowserUserID, UserID, OrganizationID, PracticeID
Authentication Email/OTP login process
Browsing activity URLs, domains, page titles and navigation
Website activity Clicks, scrolling, form interaction metadata, navigation, tab changes
Website content Relevant visible labels/text/links used as workflow evidence
Healthcare information Health information may appear in authorized healthcare workflow screens
Search/communications/financial Disclose if the final tracking implementation can transmit these
Purpose Work history, task/process analysis, workflow reconstruction
Sensitive-data exclusions Raw field values, passwords, webpage OTPs, clipboard contents, file contents/names, etc.
Transmission PracticeDNA backend over HTTPS
Retention Your actual server retention period/policy
User control Tracking ON/OFF, Blacklist, logout
Deletion/access How users request deletion/access
Sale/advertising State your actual policy
Contact Legal entity + support/privacy contact
Private browsing State that Private Browsing isn't tracked after applying