# Privacy Policy for DDDD Auth Sync Extension

**Last Updated:** November 8, 2024

## Overview

DDDD Auth Sync Extension ("the Extension") is designed to securely sync authentication cookies from cryptocurrency exchanges to the DDDD platform. This privacy policy explains what data we collect, how we use it, and your rights.

## Data We Collect

### 1. Authentication Cookies
- Cookies from supported cryptocurrency exchanges (Binance, OKX, Bitget, Bybit, Gate.io)
- Session tokens and authentication credentials from these platforms

### 2. User Account Information
- Email address (for DDDD platform login)
- Password (encrypted, transmitted securely to DDDD platform)
- User session data

### 3. Exchange Account Information
- Exchange account identifiers
- Synced cookie metadata (platform name, sync timestamp)

## How We Use Your Data

Data collected is used exclusively for:
- Authenticating users with the DDDD platform
- Syncing exchange authentication cookies to DDDD platform
- Maintaining user sessions within the extension
- Displaying synced account information in the extension interface

## Data Storage

- **Local Storage:** Session tokens and user preferences are stored locally using Chrome's `storage` API
- **No Third-Party Storage:** We do not store data with any third-party services
- **Transmission:** Data is transmitted securely via HTTPS to `ddddapp.com` only

## Data Sharing

We **DO NOT** share, sell, or transfer your data to third parties except:
- **DDDD Platform (ddddapp.com):** Core functionality requires transmitting cookies and authentication data to DDDD platform servers
- **No Analytics/Tracking:** We do not use analytics services or tracking tools
- **No Advertising:** We do not share data with advertisers

## Data Security

- All data transmission uses HTTPS encryption
- Passwords are never stored locally
- Cookies are transmitted securely to DDDD platform
- Local data is isolated to the extension context

## Your Rights

You have the right to:
- **Delete Your Data:** Remove synced accounts anytime via the extension popup
- **Logout:** Clear all local session data by logging out
- **Revoke Access:** Uninstall the extension to remove all local data

## Data Retention

- **Active Sessions:** Data retained while logged in
- **After Logout:** All local data cleared
- **After Uninstall:** All extension data automatically removed by Chrome

## Permissions Explanation

### Required Permissions:
- **cookies:** Read authentication cookies from supported exchanges
- **storage:** Store session data and user preferences locally
- **activeTab:** Detect current exchange website for automatic sync
- **webRequest:** Monitor authentication events for real-time sync
- **identity, identity.email:** Secure authentication with DDDD platform

### Host Permissions:
- **Exchange domains:** Access cookies from Binance, OKX, Bitget, Bybit, Gate.io
- **ddddapp.com:** Communicate with DDDD platform API
- **suitechsui.online:** Development/staging environment access

## Third-Party Services

This extension interacts with:
- **DDDD Platform (ddddapp.com):** All synced data is sent to DDDD platform servers
- **Cryptocurrency Exchanges:** Cookies are read from these sites but not transmitted to exchanges

## Changes to Privacy Policy

We may update this policy. Changes will be reflected in the "Last Updated" date. Continued use after changes constitutes acceptance.

## Children's Privacy

This extension is not intended for users under 18. We do not knowingly collect data from children.

## Contact

For privacy concerns or questions:
- GitHub Issues: https://github.com/DDDDAO/dddd-auth-extension/issues
- Repository: https://github.com/DDDDAO/dddd-auth-extension

## Legal

This extension is:
- Licensed under MIT License
- Not affiliated with or endorsed by any cryptocurrency exchange
- Provided "as-is" without warranties

## Compliance

By using this extension, you acknowledge:
- You have read and understood this privacy policy
- You consent to data collection and use as described
- You are responsible for compliance with exchange terms of service

---

**Note:** This extension requires a DDDD platform account. Your use of DDDD platform is subject to their separate terms and privacy policy.