Mozilla Addons reviewer: "Please add a privacy policy"

[fregante]

Just to keep you in the loop to help you understand why Firefox is stuck on version 19.12.9:

More information requested by Cse a day ago

Please add a privacy policy to this add-on that details which user data is being sent and to what services. The critical things to describe in the policy are how your extension collects, uses, stores, and shares or discloses information about people.If your add-on makes it apparent to websites that it is installed, this must also be mentioned. The policy should be about the extension only, not a copy of the website's privacy policy. It should also be the actual text, as opposed to a link to a privacy policy on a website. The privacy policy can be added in the add-on settings under “Manage Authors & License” on AMO.

My response:

Refined GitHub does not collect, use, store, nor share any data; we don't have servers. The extension only operates locally and on GitHub itself.

Help wanted to add a privacypolicy file in case they make this a hard requirement.

[fregante]

Latest:

There should be a privacy policy that states what kind of data is sent to github servers

Help.

[jerone]

I was just about to open an issue about the missing Firefox version.

---

Some info I found on the internet about privacy policies for extensions:

• Documentation: https://extensionworkshop.com/documentation/publish/add-on-policies/
• Examples of privacy policies:
  • https://addons.mozilla.org/en-US/firefox/addon/weather-extension/privacy/
  • https://addons.mozilla.org/en-US/firefox/addon/lastpass-password-manager/privacy/
  • https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/privacy/ ⬅ I think this is an good example!
  • https://addons.mozilla.org/en-US/firefox/addon/advanced-github-notifier/privacy/ ⬅ GitHub related!

None of the other GitHub related extensions have an Privacy Policy.

English is not my native language, so I'm not the best person to write a policy.

[fregante]

Perhaps:

This extension communicates with GitHub to display additional data related to files, repositories and users. GitHub will receive the same unmodified cookies from GitHub.com or your Personal Access Token, if you provide one. Some actions like "Revert Changes to File" will use the GitHub API to create a commit only when initiated by the user. The authentication is done directly between the extension and GitHub, no third party server is involved. There's no advertising and no analytics.

@sindresorhus can you add it here? It's read-only for me https://addons.mozilla.org/en-US/developers/addon/refined-github-/ownership

[fregante]

@sindresorhus also Chrome is stuck on 4 versions ago and the 20.1.6 publish command returned "OK". Does the Chrome Store say anything about it?

[sindresorhus]

can you add it here? It's read-only for me addons.mozilla.org/en-US/developers/addon/refined-github-/ownership

✅ Very well written.

[sindresorhus]

also Chrome is stuck on 4 versions ago and the 20.1.6 publish command returned "OK". Does the Chrome Store say anything about it?

[fregante]

Wow... worse waiting times than AMO.

Let's see if the policy is enough. Could still be rejected for being too vague

[jerone]

It looks like the Firefox version was accepted; I got an update to 20.1.6 today. 🦊

[fregante]

Hallelujah!

[fregante]

@sindresorhus also Chrome

"message": "Publish condition not met: To publish your item, you must provide mandatory privacy information. This can be done in the new Developer Dashboard."

[sindresorhus]

Why do we need the activeTab permission (specifically)?

[fregante]

To enable GH on Enterprise https://github.com/fregante/webext-domain-permission-toggle

activeTab lets us read the URL of the tab where the user clicks "enable"

[sindresorhus]

Ok, submitted. They warned that it could take up to several weeks to review...

[sindresorhus]

While we wait for Google, maybe there's something we can improve with the privacy form I filled out?

---

Single Purpose Description
The extension adds power-user features to GitHub.com.

activeTab
We need this to be able to enable the extension on GitHub Enterprise. activeTab lets us read the URL of the tab where the user clicks "enable". https://github.com/fregante/webext-domain-permission-toggle

Host Permission
We need access to https://github.com/* to add the features and access to https://api.github.com/* to fetch required data for some of the features we add.