D-slop Privacy Policy

1. Scope

This policy covers the D-slop browser extension only. It does not cover the D-slop project website, the GitHub repository, or any third-party sites you visit while using the extension.

The short version: the extension does not collect, transmit, or store any information about you or the pages you visit. The only outbound request is a daily fetch of detection rules from a private endpoint. No page content ever leaves your browser.

2. Data stored on your device

The extension stores six values in your browser's local extension storage (chrome.storage.local). This storage is local to your device. It is not synced to your browser account or any external server.

1. Enabled state. Whether the extension is on or off. A boolean. Default: on.
2. Display mode. Your selected mode: Highlight, Collapse, or Hidden. Default: Highlight.
3. Confidence threshold. The detection sensitivity you have set. Default: 0.20.
4. Flag count. The number of blocks flagged on the current page. Used only to display the count in the popup. Overwritten on every page load.
5. Cached rules. The detection rules file fetched from the rules endpoint. Stored so the extension works without a network connection once rules have been fetched at least once.
6. Rules last fetched. A timestamp recording when the rules were last downloaded. Used to determine whether a fresh fetch is needed.

None of these values contain personal information. None are transmitted anywhere except as described in the next section.

3. Network requests

The extension makes one type of outbound request: a GET to the rules endpoint at most once every 24 hours.

• Endpoint. https://d-slop-rules.jared-the-automator.workers.dev
• Frequency. At most once per 24 hours, on browser startup or install. No request is made if a fetch has already occurred within that window.
• Request body. None. This is a plain GET with no parameters, no cookies, no identifying headers beyond the standard browser User-Agent.
• Response. A JSON file containing phrase lists, signal weights, and detection thresholds. No personal data is returned.
• Hosting. The endpoint is a Cloudflare Worker. Cloudflare retains standard access logs (IP address, timestamp, user agent) per their own privacy policy. D-slop does not receive or store those logs.

No other network requests are made. Page content is never transmitted. URLs of pages you visit are never recorded or sent anywhere.

4. What we do not collect

• Page content or text from any site you visit
• URLs, domain names, or browsing history
• Personal information of any kind
• Crash reports or diagnostic telemetry
• Usage analytics or feature interaction data
• Information about which sites triggered detections

5. Questions and corrections

If you believe this policy is inaccurate or have questions about how the extension handles data, open an issue on the D-slop GitHub repository. The source code is public and the storage and network behavior described here is fully auditable.