search

handsomecode / trello-parent-child

Cross-browser extension for Parent/Child Management in Trello
Apache License 2.0
39 stars 7 forks source link

Permissions in Chrome / Privacy Policy #29

Open achiyae opened 7 years ago

achiyae commented 7 years ago

Hi Thanks for the great extension.

I see that your chrome extension requires "Read your browsing history". Is there a special reason for that? Can you please be clear about your privacy policy and publish one? (for example: Plus for Trello - http://www.plusfortrello.com/p/privacy-policy.html)

Thanks :+1:

alexzub commented 7 years ago

@eggsterino I apologize for a delayed response.

First of all, every bit of the code is open sourced and viewable by members of the community here in this github repo. We don't collect any data.

I'll need to ask our developers to examine the code to understand whether we need access to the "tabs" permission (as seen here), in addition to storage and trello.com. However, we don't have enough capacity to do so at the moment.

I am encouraging you or any other user of the plugin to examine the code and check if the permission is indeed required. If it isn't, a pull request with the change applied would be appreciated.

jwillmer commented 6 years ago

I can confirm that https://github.com/handsomecode/trello-parent-child/blob/9c74f3ac9c7db599a36d89a5c7d08408d3cef0f8/vendor/chrome/manifest.json#L14 will generate a read your browsing history warning as described in Chrome permission warnings.

I think it would be a good idea to inform the users that it is related with tab permissions since I also see no reason why this app would need my browsing history.

Edit: It would be good to get around using the tab permission since even if someone can look up the implementation in GitHub it does not need to be the same as the code that was used to generate the app. Therefor it will prevent users from using the app out of security concerns.