Chrome Extension Privacy Policy

1. Single Purpose

The single purpose of this extension is to provide a quick-launcher for Toolkiya's free online tools, with two optional utility features: a public-IP lookup and a connection speed test. Every permission and host permission declared in the manifest exists only to support this single purpose.

2. Data Disclosure by Chrome Category

The Chrome Web Store asks every developer to disclose collection of specific data categories. Here is our complete, accurate disclosure:

3. Permissions — What Each One Does

• storage — Saves your theme choice, last-used tools, and daily rate-limit counters tochrome.storage.local. This storage never syncs and never leaves your device.
• contextMenus — Adds four right-click shortcuts (Compress image, QR code, Beautify screenshot, Word count) that open the matching Toolkiya page in a new tab. The extension does not read the page content, image data, URL, or selected text — it only uses the click itself as a trigger to open a fixed toolkiya.com URL.
• activeTab — Lets the extension open Toolkiya in the tab you were just on when you clicked the icon. No tab content is read.
• tabs — Used to callchrome.tabs.create(open a new tab). No tab contents, URLs, or titles of other tabs are accessed.
• downloads — Lets client-side tools (if invoked from the extension) save generated files to your Downloads folder. No file data is transmitted before download.

4. Host Permissions — What Each Domain Is For

• https://toolkiya.com/* — Opening our tool pages when you click a launcher item or context menu. Normal browser page load.
• https://ipapi.co, https://ipwho.is, https://api.ipify.org, https://ipinfo.io — Each is called onlywhen you click "Check My IP". We try one, fall back to the next if it fails. The request automatically includes your public IP (at the network layer). The response (country, region, ISP) is shown to you and discarded.
• https://speed.cloudflare.com/* — Called onlywhen you click "Start Speed Test". Cloudflare measures upload/download speed and latency between your browser and their edge. We do not log, proxy, or store the result.

5. User Consent Model

The extension is strictly user-initiated. It performs no network calls, no storage writes, and no background activity until you take an action:

• Installing the extension writes nothing to storage.
• Opening the popup writes nothing to storage.
• IP lookup runs only after you click "Check My IP".
• Speed test runs only after you click "Start Speed Test".
• Tool pages open only after you click a tool tile, context menu, or the extension icon.
• Theme preference is written only after you toggle the theme.

Clicking these user-initiated features constitutes informed consent to the specific data flow described in sections 3 and 4 for that feature.

6. Storage & Retention

• Where:Chrome's sandboxed chrome.storage.local on your device. Never synced to Chrome Sync or any Toolkiya server.
• What:Theme choice, recent-tools list, and daily counters (e.g. how many IP lookups you've made today, used for rate limiting).
• How long: Retained until you remove the extension, clear Chrome extension storage, or reset the preference.
• Server retention: Zero. Toolkiya servers store no data from the extension because the extension never sends data to Toolkiya servers.

7. Data Sharing & Selling

We do not sell, rent, trade, share, or transfer user data to any third party. The extension contains no advertising SDKs, no analytics libraries, no trackers, and no telemetry. The only external communication is the user-initiated IP-lookup and speed-test requests documented in section 4, which go directly from your browser to those third-party services (not through us).

8. How to Opt Out or Delete Your Data

• Avoid a feature— Simply don't click "Check My IP" or "Start Speed Test". No third-party request is made until you click.
• Clear local data — Go to chrome://extensions → Toolkiya → Details → Site access / Clear data.
• Uninstall — From chrome://extensions, clickRemove. This wipes all extension storage instantly.

9. Data Security

The extension is Manifest V3, runs as a background service worker, and uses Chrome's sandboxed storage. All outgoing network requests use HTTPS/TLS. We do not load remote code: every script inside the extension ships with the published package and is reviewable via the Chrome Web Store source viewer.

10. No Remote Code Execution

The extension does not download, execute, or evaluate any code from a remote server at runtime. Every line of JavaScript that runs as part of the extension is included in the uploaded package and visible to Chrome Web Store reviewers.

11. Your Rights (GDPR, CCPA, India DPDP)

Because the extension does not collect identifiable personal data, there is no personal data we hold about you to access, correct, or erase. Uninstalling the extension exercises the equivalent of the right to erasure by wiping all local storage. If you have any privacy concerns, email contact@toolkiya.com. We respond within 30 days.

12. Children's Privacy

The extension is not directed at children under 13. It does not knowingly collect data from anyone regardless of age.

13. Chrome Web Store Limited Use Compliance

Toolkiya's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

• User data is used only to provide or improve user-facing features of the extension.
• User data is not transferred to third parties for any purpose other than providing or improving those features, unless required by law or as part of a merger/acquisition.
• User data is not used or transferred for advertising, including personalized or re-targeted ads.
• User data is not used or transferred to determine creditworthiness or for lending.
• Humans do not read user data except with user consent, for security, to comply with law, or in aggregated/anonymized form for internal operations.

14. Changes to This Policy

We will revise this policy whenever the extension's data practices change. Updates will be published at this URL with a new "Last updated" date. Significant changes will be noted in the Chrome Web Store changelog for the next version release.

15. Contact

Questions about this policy or the extension's data practices: contact@toolkiya.com