Privacy Policy

Vinh's Automations — Chrome & Edge Extension

No data collected

Effective date: May 29, 2026

Summary

Vinh's Automations is a userscript manager that runs user-installed scripts on web pages. It does not collect, transmit, or share any personal data. All data remains on your device.

Data Storage

The extension stores the following data locally on your device using chrome.storage.local:

• Userscript source code and metadata (encrypted at rest with AES-256-GCM)
• Extension preferences (update interval, theme, allowed URL sources)
• A script index for fast URL matching
• Structured log entries (capped at 500, auto-rotated)

No data is synced to the cloud, transmitted to external servers, or shared with third parties.

Network Requests

The extension makes network requests only when you explicitly:

• Install a script by providing a GitHub raw URL
• Check for script updates (fetches the @updateURL specified in the script's metadata)

All requests are HTTPS-only and restricted to GitHub domains by default. No analytics, telemetry, tracking pixels, or advertising networks are contacted.

Permissions Explained

• storage — Stores encrypted script data and preferences locally
• scripting — Injects userscripts into web pages via chrome.scripting.executeScript
• host_permissions (<all_urls>) — Required because userscripts target arbitrary URLs defined by the user's @match patterns
• activeTab — Identifies the current tab's URL for script matching and badge count
• tabs — Reads tab URLs to match scripts and identify injection targets
• alarms — Powers the configurable auto-update scheduler for installed scripts

Remote Code Execution

The extension executes user-installed scripts on web pages. All script code is stored locally (encrypted at rest). Scripts are fetched exclusively from GitHub raw URLs that the user explicitly provides — no code is loaded from any other remote source at runtime.

Third-Party Services

None. The extension does not integrate with any third-party analytics, advertising, or data-processing services.

Children's Privacy

This extension is not directed at children under 13 and does not knowingly collect any information from children.

Changes to This Policy

If this policy is updated, the changes will be posted on this page with an updated effective date. Continued use of the extension after changes constitutes acceptance.

Contact

For questions about this privacy policy, open an issue on the GitHub repository.