feat: privacy policy

Author: lcandy2

PRIVACY.md

@@ -0,0 +1,112 @@
+# Privacy Policy
+Last updated: 26 December 2024
+
+## Overview
+GitIngest Extension is committed to protecting your privacy. This privacy policy explains what information we collect, how we use it, and what rights you have in relation to it. This policy applies to all users of our browser extension, regardless of location.
+
+**Important Note**: This extension is designed to be completely offline-capable and does not transmit any data to any servers. All functionality is handled locally within your browser.
+
+**Disclaimer**: This extension only provides a redirect functionality to GitIngest.com or other user-configured URLs. Any data collection, processing, or usage that occurs on these websites is governed by their respective privacy policies and is not covered by this privacy policy. We are not responsible for and have no control over the privacy practices of these external services.
+
+## Data Collection
+
+### What We Collect
+The extension collects and stores:
+1. **Service URL Configuration**: If you choose to use a custom GitIngest service instance, the extension stores your configured base URL locally in your browser.
+
+### What We Don't Collect
+The extension does NOT collect:
+- Personal information
+- GitHub account information
+- Repository data
+- Browsing history
+- Usage statistics
+- Cookies or tracking data
+- Any other user data
+
+### Zero Data Transmission
+By design and as verified in our open-source code:
+- No data is ever transmitted to our servers
+- No data is ever transmitted to third-party servers
+- No analytics or tracking code is implemented
+- All operations are performed locally in your browser
+- The extension functions completely offline after installation
+
+## Data Use
+The stored Service URL Configuration is used solely to:
+1. Redirect GitHub repository pages to your configured GitIngest service
+2. Maintain your preferred GitIngest service setting between browser sessions
+
+We do not:
+- Process this data for any other purpose
+- Share this data with any third parties
+- Use this data for analytics or tracking
+- Combine this data with other information
+- Upload or transmit this data anywhere
+
+## Data Storage and Security
+- All configuration data is stored locally in your browser using the browser's built-in storage API
+- Data never leaves your browser
+- No external servers are involved in any operations
+- No third-party analytics or tracking is implemented
+- Data is stored securely within your browser's protected storage area
+
+## Your Privacy Rights
+
+### For All Users
+- Access: View your stored configuration at any time through the extension popup
+- Deletion: Clear your data through browser settings or by uninstalling the extension
+- Modification: Update your configuration through the extension popup
+- Portability: Export your browser data using built-in browser tools
+
+### For European Users (GDPR)
+Under the General Data Protection Regulation (GDPR), you have the following rights:
+- Right to be informed: This policy provides transparent information about our data practices
+- Right to access: View all your stored data through browser settings
+- Right to rectification: Modify your configuration at any time
+- Right to erasure: Remove all stored data by uninstalling the extension
+- Right to restrict processing: Not applicable as we only store, not process your data
+- Right to data portability: Export your data using browser tools
+- Right to object: Not applicable as we don't process data for marketing or profiling
+- Rights related to automated decision making: Not applicable as we don't make automated decisions
+
+### For California Residents (CCPA)
+Under the California Consumer Privacy Act (CCPA), you have the following rights:
+- Right to know: This policy discloses all data collection and use
+- Right to delete: Remove your data through browser settings or extension uninstallation
+- Right to opt-out: Not applicable as we don't sell personal information
+- Right to non-discrimination: We don't discriminate based on privacy choices
+
+## Permissions
+
+### GitHub.com Access
+The extension requires access to GitHub.com (`*://*.github.com/*`) to:
+- Detect repository pages
+- Add the "Open in GitIngest" button
+- Generate correct GitIngest service URLs
+
+This access is used solely for enhancing the GitHub interface with GitIngest functionality and does not involve collecting or transmitting any data from GitHub pages.
+
+### Redirect Functionality
+The extension's core functionality is to redirect users from GitHub repository pages to GitIngest services:
+- By default, redirects go to GitIngest.com
+- Users can configure a custom GitIngest service URL
+- The extension is not involved in and cannot access any data processing that occurs on these external services
+- Users should review the privacy policies of their configured GitIngest services
+
+### Storage Permission
+Storage permission is used exclusively for:
+- Storing your preferred GitIngest service URL
+- Maintaining your configuration across browser sessions
+
+## International Data Transfers
+No data transfers occur as all data is stored locally in your browser.
+
+## Children's Privacy
+Our extension does not knowingly collect any personal information from children under 13 years of age.
+
+## Changes to This Privacy Policy
+We may update this privacy policy from time to time. Any changes will be reflected in this document with an updated version number. Significant changes will be communicated through our GitHub repository.
+
+## Contact Information
+If you have any questions about this privacy policy or our treatment of your data, please open an issue in our GitHub repository