Privacy Policy For Copy to Bluesky

发表于 更新于

Privacy Practices for Chrome Web Store Submission

1. Justification for clipboardRead Permission

Purpose:
The clipboardRead permission is essential for the core functionality of this extension. The extension allows users to quickly post content from their clipboard to Bluesky without manually copying and pasting.

Usage:

  • The extension reads text content from the clipboard when the user clicks the “Paste Text” button or pastes content into the text input field
  • The extension reads image content from the clipboard when the user clicks the image upload area or pastes an image
  • Clipboard content is only accessed when the user explicitly initiates an action (clicking a button or pasting)
  • All clipboard data is processed locally in the browser and is never transmitted to any third-party servers except Bluesky’s official API when the user chooses to post

User Control:
Users have full control over when clipboard content is accessed. The extension does not automatically read the clipboard in the background. All clipboard access requires explicit user interaction.

Data Handling:
Clipboard content is only used to populate the extension’s interface for preview and editing before posting. It is never stored permanently or shared with any service other than Bluesky when the user explicitly posts content.

2. Justification for Remote Code Use

Purpose:
Remote code execution is required to communicate with Bluesky’s official API (https://bsky.social) for authenticating users and posting content to Bluesky.

Usage:

  • The extension uses the official @atproto/api library to communicate with Bluesky’s ATProto protocol servers
  • All API calls are made directly to Bluesky’s official service endpoint (https://bsky.social)
  • No third-party proxies or intermediaries are used
  • Remote code is only executed when:
    • User logs in with their Bluesky credentials
    • User posts content to Bluesky
    • The extension needs to authenticate API requests

Security:

  • All API communications use HTTPS
  • User credentials (handle and app password) are stored locally using Chrome’s secure storage API
  • No credentials or user data are transmitted to any service other than Bluesky’s official API

Transparency:
The extension uses only the official Bluesky API client library (@atproto/api), which is a well-maintained, open-source library provided by the Bluesky team. No custom or obfuscated remote code is executed.

3. Justification for Storage Permission

Purpose:
The storage permission is required to securely store user configuration data locally on their device.

Data Stored:

  • Bluesky Handle: The user’s Bluesky identifier (e.g., username.bsky.social)
  • App Password: The user’s Bluesky App Password (not their main account password)
  • Draft Content: Temporary drafts of posts and configuration (optional, for user convenience)

Storage Method:

  • All data is stored using Chrome’s chrome.storage.local API
  • Data is stored locally on the user’s device only
  • No data is synchronized to cloud services or transmitted to external servers

Data Usage:

  • Stored credentials are used only to authenticate API requests to Bluesky
  • Draft content is used to restore unsaved work if the user closes and reopens the extension
  • All stored data can be cleared by the user at any time through Chrome’s extension settings

Privacy:

  • No user data is shared with third parties
  • No analytics or tracking data is collected
  • All data remains on the user’s local device
  • Users can delete all stored data by uninstalling the extension

4. Single Purpose Description

Single Purpose:
This extension has a single, narrow purpose: to enable users to quickly post text and images from their clipboard to Bluesky social media platform.

Functionality:

  • Users can copy text or images to their clipboard
  • Users open the extension popup
  • The extension reads the clipboard content and displays it in the interface
  • Users can edit the content (add text descriptions, modify text)
  • Users can post the content to their Bluesky account with one click

Scope:

  • The extension only interacts with Bluesky’s official API
  • No other social media platforms are supported
  • No other functionality beyond posting to Bluesky is provided
  • The extension does not modify web pages or inject content scripts into websites

User Benefit:
This single-purpose design allows users to quickly share content to Bluesky without opening a browser tab, navigating to Bluesky’s website, and manually creating a post. It streamlines the content sharing workflow specifically for Bluesky users.

5. Data Usage Compliance Certification

Certification Statement:
I certify that this extension’s data usage complies with Chrome Web Store’s Developer Program Policies.

Data Collection:

  • This extension collects minimal data necessary for its core functionality
  • Only user-provided configuration data (Bluesky handle and app password) is stored
  • No personal information, browsing history, or usage analytics are collected
  • No data is collected without explicit user action

Data Usage:

  • All collected data is used solely for the stated purpose: posting content to Bluesky
  • User credentials are used only to authenticate API requests to Bluesky’s official service
  • No data is used for advertising, tracking, or any purpose other than the extension’s core functionality

Data Sharing:

  • User data is shared only with Bluesky’s official API when the user explicitly posts content
  • No data is shared with third-party services, advertisers, or analytics providers
  • No data is transmitted to servers other than Bluesky’s official API endpoint

Data Security:

  • All data is stored locally using Chrome’s secure storage API
  • All API communications use HTTPS encryption
  • User credentials are never exposed in logs or error messages
  • The extension follows security best practices for handling sensitive authentication data

User Control:

  • Users can view and modify stored configuration at any time
  • Users can delete all stored data by uninstalling the extension
  • Users have full control over when content is posted to Bluesky
  • No automatic posting or background data transmission occurs

Compliance:

  • This extension complies with Chrome Web Store’s User Data Privacy policy
  • This extension complies with Chrome Web Store’s Single Purpose policy
  • This extension complies with Chrome Web Store’s Permissions policy
  • All permissions are used only for their stated purposes
  • No deceptive or misleading data practices are employed

Additional Privacy Information

Open Source:
The source code for this extension is available for review, ensuring transparency in data handling practices.

No Third-Party Services:
This extension does not use any third-party analytics, advertising, or tracking services. All functionality is self-contained and communicates only with Bluesky’s official API.

User Consent:
All data collection and usage requires explicit user consent. Users must:

  • Manually enter their Bluesky credentials
  • Explicitly choose to post content
  • Grant clipboard access permission (which Chrome prompts for)

Data Minimization:
The extension follows the principle of data minimization, collecting and storing only the minimum data necessary for its core functionality.