reminder: privacy policies on Extensions

[Thorin-Oakenpants]

as of current Wiki page (in future all additions require policy vetting) - checklist to find privacy policy links

Extensions

• CanvasBlocker - https://addons.mozilla.org/firefox/addon/canvasblocker/privacy/
• Cookie AutoDelete - https://github.com/Cookie-AutoDelete/Cookie-AutoDelete/wiki/Privacy-Policy
• Decentraleyes - https://addons.mozilla.org/firefox/addon/decentraleyes/privacy/
• Greasemonkey - https://addons.mozilla.org/firefox/addon/greasemonkey/privacy/
• HTTPS Everywhere - https://www.eff.org/code/privacy/policy
• Neat URL - https://addons.mozilla.org/firefox/addon/neat-url/privacy/
• NoScript - https://addons.mozilla.org/firefox/addon/noscript/privacy/
• Redirector - https://github.com/einaregilsson/Redirector/blob/master/privacy.md
• SSleuth - https://addons.mozilla.org/firefox/addon/ssleuth/privacy/
• SSLPersonas - https://addons.mozilla.org/firefox/addon/sslpersonas/privacy/
• uBlock Origin - https://github.com/gorhill/uBlock/wiki/Privacy-policy
• uMatrix - https://github.com/gorhill/uMatrix/wiki/Privacy-policy

not my problem ^{or my job}

• Link Cleaner - 🔸 requested
• HTTPS by default
• QuickJava
• Request Control - 🔸 requested
• Smart Referer - 🔸 requested

don't care ^{also obsolete at ESR52 EOL}

• Cookie Controller
• Live HTTP Headers - earthlng clone
• No Redirect (Clone) - earthlng clone
• No Resource URI Leak (Clone) - earthlng clone
• Self-Destructing Cookies

---original post

this is a reminder for Thorin to do something about privacy policies for recommended addons - both in our wiki (I think we're good - eg gorhill, C-AD, Decentraleyes, etc - well known respected devs IMO, but we will check anyway), and those in the sticky

for example: here is an extension https://addons.mozilla.org/en-US/firefox/addon/popup_blocker/ .. 4th page of 57 compatible extensions sorted by popularity Now read the privacy policy - https://www.popup-blocker.com/privacypolicy.html How can 25K users be so naive

PS: Not that I think we need any sort of popup blocker

1. dom.popup_allowed_events", "click dblclick" (this does it for me)
2. overkill: breaks lots so u need to set quite a few exceptions: set uBo to use no-popups: * true (that's the icon of two pages, bottom left in your doorhanger) - it will not cover ALL popup events AFAIK. It is better to allow all and deny troublesome sites

That fixes 99.9% of them. I've yet to see one to be honest

[Thorin-Oakenpants]

Note sure how to do this for the Wiki, I do not want it to become too "busy". Note if you mouse over ^PP you get alt text Privacy Policy. Asterix is there to break the color. Does this look OK?

• uBlock Origin ^{✔ Privacy} | GitHub

Edit: I know, I'll use a ✔ symbol, and we'll just put up privacy policy links for those we can find - the tick meaning it's all good re privacy. Just need to find all the links now

[Atavic]

• Yes for uM: https://github.com/gorhill/uMatrix/wiki/Privacy-policy

• NoScript Security Suite has it on AMO

• Decentraleyes has it on AMO:

• CanvasBlocker hasn't. Hope @kkapsner can provide it.

• Same as above with https-by-default

• Greasemonkey does have it on AMO. They DO collect info.

• Same as CB with QuickJava, @ThatOneGuyDotNet please help.

• Same as above for Cookie Controller by iann.

• Self-Destructing Cookies hasn't it, too.

[Atavic]

Yes, it falls back on %LOCALE%

[Atavic]

Just do that.

[Thorin-Oakenpants]

these requests make me feel like a spammer :-(

[kkapsner]

Didn't feel like spam on the other side.

[Thorin-Oakenpants]

Closing: have added privacy policy links where they exist, having one is up to the extension owners

[Atavic]

@rekixex Been asked here.

[Thorin-Oakenpants]

in future all additions require policy vetting

It seems that Skip Redirect doesn't have a privacy policy - I may be wrong, just did a quick search.

I also said

Closing: have added privacy policy links where they exist, having one is up to the extension owners

I am no longer interested in chasing anyone up. I will check for a privacy policy when I add an item, but that's it.

[Atavic]

Skip Redirect: This extension does not collect or send data of any kind to third parties

[Atavic]

There's a bugzilla discussion about privacy labels for addons/webextensions:

“privacy”: [ “sendsUsageDataToThirdParty”, “sendsUsageDataToDeveloper”,
“sendsBrowsingData”, “sendsProfileData”, “collectsUserData” ]

Also related: pyllyukko/user.js#365