PageDrone Privacy Policy

Effective Date: September 1, 2026 · Last Updated: September 1, 2026

    Summary: PageDrone operates entirely on your local device. We do not maintain any backend servers or centralized databases to collect, store, or sell your personal data, passwords, browsing history, or cookies. All automation configurations, execution logs, and API credentials remain solely on your local computer.
  

1. Introduction

PageDrone ("we", "our", or "the Extension") is a Chrome extension designed to assist users in automating repetitive web tasks, flow orchestrations, and AI-assisted web procedures. We are deeply committed to respecting and protecting your privacy. This Privacy Policy details how PageDrone collects, processes, stores, and handles data in accordance with the Google Chrome Web Store User Data Policy.

2. Data Collection and Processing

PageDrone does not automatically collect or transmit personal information to any third party or remote server operated by us. The table below discloses every category of data handled by the Extension:

Data Category	What It Includes	How It Is Used	Storage Location & Retention
User Configurations	Target site URLs, custom procedure steps (clicks, inputs, delays), canvas flow nodes, execution schedules.	Used strictly to execute user-defined automation tasks.	Stored locally in `chrome.storage.local` until modified or deleted by the user.
User-Provided API Keys	Optional AI model API keys (e.g., OpenAI, Anthropic, or custom endpoints) provided voluntarily by the user in Settings.	Used exclusively to authenticate client-side requests directly from the user's browser to the user-specified AI provider.	Stored securely in local storage; never transmitted to PageDrone or any unauthorized parties.
Execution & Audit Logs	Task status, completion timestamps, and non-sensitive step diagnosis.	Displayed to the user within the extension dashboard for troubleshooting and review.	Stored in local storage with automatic circular buffer limits (up to 2,000 entries) or cleared upon user request.
Web Page Content	DOM elements, selectors, structured text extracted during user-configured steps, and temporary viewport screenshots.	Used locally in real-time to locate UI elements, diagnose failures, or extract requested data.	Processed in memory during execution; never saved permanently to external servers.

3. Data We Explicitly DO NOT Collect

No Passwords or Sensitive Input: The extension strictly ignores and replaces password field contents with secure placeholders at the script injection level. We never read, extract, or transmit user passwords.
No Browsing Tracking: We do not track, profile, monitor, or record your web browsing activities. The extension only interacts with web pages specifically specified in your automation tasks or actively managed tabs.
No Personal Identifiers: We do not collect names, email addresses, phone numbers, IP addresses, or hardware fingerprints.
No Third-Party Analytics / Trackers: The extension contains zero tracking pixels, analytics scripts (e.g., Google Analytics, Mixpanel), or advertising SDKs.

4. Third-Party Sharing and Data Transfers

PageDrone does not sell, rent, monetize, or trade your data to any third party, data broker, or advertising network under any circumstances.

Data transmission occurs solely in the following two optional, user-directed scenarios:

User-Configured AI Services: If you voluntarily configure an AI model provider (such as OpenAI, Anthropic, or a custom API endpoint), the extension will send the relevant diagnostic text or prompt directly from your browser to your designated provider using your provided API key. No intermediate server is involved.
User-Configured HTTP Requests: If you explicitly create an "HTTP Request" canvas node or step, the extension will send the specified request payload directly to your configured endpoint.

5. Permissions and Justifications

In accordance with Chrome MV3 Minimal Privilege Principles, PageDrone requests only the permissions strictly necessary for its functionality:

storage / unlimitedStorage: Used solely to save your automation configurations, flows, site settings, and logs locally on your machine.
alarms: Used to schedule user-configured periodic automation tasks.
scripting: Used to inject self-contained automation scripts into the specific tabs you configure.
tabs: Used to open, focus, switch, and close browser tabs designated for automation routines.
cookies: Used locally to detect security challenge clearance (e.g., Cloudflare verification cookies); cookie values are never uploaded or shared.
notifications: Used to show desktop alerts upon task completion or when manual intervention is required.
host_permissions (<all_urls>): Necessary because users can configure automations on any arbitrary web domain. The extension only accesses pages that the user explicitly configures or navigates to.

6. User Control and Data Management Rights

You maintain complete ownership and control over your data at all times:

Access & Export: You can export all your sites, procedures, and flows as standard JSON files at any time via the extension settings.
Deletion: You can selectively delete individual sites, logs, or procedures, or clear all storage via the extension interface.
Complete Removal: Uninstalling the extension from chrome://extensions immediately and permanently removes all stored data from your browser.

7. Compliance with Chrome Web Store Policies (Limited Use)

PageDrone adheres strictly to the Chrome Web Store User Data Policy, including the Limited Use requirements:

The use of data obtained through Chrome APIs is strictly limited to providing and improving the user-facing features of PageDrone.
We do not transfer user data to third parties, except as strictly necessary to provide the user-initiated feature (e.g., sending prompts to user-configured AI APIs).
We do not use or transfer user data for personalized advertising, credit assessment, or data brokering.

8. Children's Privacy

PageDrone is not directed at children under the age of 13, and we do not knowingly collect or solicit information from children.

9. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements or regulatory changes. Any updates will be posted on this page with an updated "Last Updated" date.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Developer Email: wenfer@foxmail.com
Open Source Repository: https://github.com/anomalyco/auto-checkin

PageDrone 隐私权政策（中文版）

生效日期：2026 年 9 月 1 日 · 最近更新：2026 年 9 月 1 日

    核心摘要：PageDrone 是一款完全在您本地设备上运行的浏览器自动化扩展。我们不设立任何收集、存储或出售您个人数据的后端服务器。您的所有站点配置、流程、执行日志以及 API 密钥均仅存储在您的本地计算机上。
  

1. 概述

PageDrone（以下称“我们”或“本扩展”）致力于帮助用户在浏览器中自动化执行重复性任务、流程编排及 AI 辅助网页操作。我们高度重视用户的隐私保护，本隐私权政策详细说明了本扩展如何收集、使用、存储及处理用户数据，严格遵守 Google Chrome 网上应用店开发者计划政策及用户数据政策。

2. 数据的收集与处理

本扩展不会主动向任何由我们运营的远程服务器传输您的个人信息。下表详细列出了本扩展涉及的所有数据类别及其处理方式：

数据类别	具体内容	使用目的	存储位置与保留周期
用户配置数据	目标网址 URL、自定义步骤（点击、输入、等待）、画布流程图节点、定时任务配置。	仅用于执行用户显式配置的自动化与流程任务。	存储于本地 `chrome.storage.local`，直到用户主动修改或删除。
用户提供的 API Key	用户在设置面板中自主填写的大模型 API 密钥（如 OpenAI / Anthropic / 自定义端点）。	仅用于从用户浏览器直连用户指定的大模型端点以进行页面探索或流程诊断。	安全保存在本地存储中，绝不上传至任何第三方或中间服务器。
执行与审计日志	任务执行状态、完成时间戳及步骤诊断结果。	在扩展面板中展示给用户，供故障排查与审计查看。	存储于本地，设有环形缓冲上限（最多 2,000 条），用户可一键清空。
网页交互数据	DOM 元素、CSS/XPath 选择器、结构化提取文本及运行时视口临时快照。	仅在执行期间于内存中临时处理，用于定位元素、验证结果或提取指定数据。	仅在执行时内存驻留，不持久化上传到任何外部服务器。

3. 我们明确不收集的数据

绝不收集密码与敏感字段：注入脚本在源头自动将所有 type="password" 密码框内容替换为脱敏占位符，严禁读取或上传任何密码。
绝不追踪浏览历史：我们不追踪、记录或分析用户的日常网页浏览行为，仅对用户显式配置的任务目标页面进行操作。
绝不收集个人身份信息：不收集姓名、邮箱、手机号、IP 地址或设备硬件指纹。
无第三方追踪器 / 分析 SDK：扩展内不包含任何广告 SDK、统计打点或第三方用户行为追踪代码。

4. 数据的共享与第三方披露

我们绝不会将您的任何数据出售、出租、转让或共享给任何第三方、数据经纪商或广告机构。

数据仅在以下由用户主动发起并显式配置的场景下进行直接端到端通信：

用户自主配置的 AI 服务：若用户在扩展中启用了 AI 辅助功能并配置了第三方 API Key，请求将直接从用户本地浏览器发送至用户指定的 Provider 端点，不经过任何中间服务器；
用户自主配置的 HTTP 请求：若用户在流程中配置了 HTTP 请求节点，请求将直接发送至用户指定的目标 URL。

5. 权限说明与合理必要性

storage / unlimitedStorage：仅用于在本地保存用户的配置、流程及执行日志。
alarms：用于触发用户自定义的每日定时执行任务。
scripting：用于在用户配置的目标页面中注入自包含的自动化操作脚本。
tabs：用于创建、切换、管理和关闭自动化执行所需的标签页。
cookies：仅在本地读取特定验证 Cookie（如 Cloudflare 防护通过状态），不向外上传。
notifications：用于在任务完成或需要人工介入时向用户发出桌面通知。
host_permissions (<all_urls>)：由于用户可在任意目标网站上配置自动化技能，因此需要广泛的主机访问权限，但扩展仅在用户明确配置的网址上工作。

6. 用户的数据控制权（访问、导出与删除）

导出数据：用户可随时在扩展设置中将全部站点、技能和流程导出为标准 JSON 文件；
删除数据：用户可随时单条删除站点、清空日志，或在设置中一键重置；
彻底清除：在浏览器扩展管理页中卸载本扩展，将立即并永久清除浏览器中存储的所有扩展数据。

7. Chrome Web Store 有限使用（Limited Use）合规声明

PageDrone 严格遵守 Chrome 网上应用店用户数据政策，重申以下承诺：

对 Chrome API 权限的使用严格限于提供和改善 PageDrone 的面向用户功能；
绝不将用户数据转让给第三方（用户自主请求的 AI API 直连除外）；
绝不将用户数据用于个性化广告、信用评估或任何形式的商业转售。

8. 开发者联系方式

如对本隐私权政策或您的数据有任何疑问、意见或反馈，请通过以下方式与我们联系：

电子邮箱：wenfer@foxmail.com
开源项目主页：https://github.com/anomalyco/auto-checkin