Privacy policy — Prototype Feedback
Prototype Feedback is a browser extension that lets a reviewer pin comments to elements (or regions) on a webpage and export the captured feedback as a JSON file for offline use.
What the extension collects
When the reviewer takes an action (clicks an element, drags a region, or saves a comment), the extension stores the following on the reviewer's local machine only, inside the browser's extension storage:
- The reviewer-typed comment text.
- A cropped PNG screenshot of the targeted element or region.
- A CSS selector for the targeted element (if applicable).
- The bounding-box coordinates of the target in CSS pixels.
- The page URL, page title, and viewport dimensions of the visited page.
- The reviewer's chosen display name and optional project label.
- Any reference attachments the reviewer drops in: image/file bytes (encoded as base64) and pasted reference URLs.
What the extension does NOT collect
- No telemetry, analytics, or crash reporting.
- No data is sent to the extension author or any third-party server.
- No data is sent automatically anywhere; the reviewer must explicitly click "Export JSON" to write a file to their own Downloads folder.
- No browsing history, cookies, form data, or page contents beyond the screenshot of the area the reviewer chose to capture.
Permissions and why they are required
| Permission | Why |
|---|---|
storage | Save captured comments locally between page loads and browser sessions. |
activeTab | Temporary access to the tab the reviewer is currently viewing — granted only when they click the extension icon. Used to read the page URL and inject the in-page toolbar. Revoked when the tab navigates. |
scripting | Inject the toolbar / content script into the active tab when the reviewer clicks "Start feedback session". |
downloads | Write the exported JSON file to the reviewer's Downloads folder when they click Export. |
The extension does not request the broad <all_urls> host permission and does not request the tabs permission. Access to a page is scoped to the single tab the reviewer explicitly activates.
Where data goes
- Stored: in
chrome.storage.local, scoped to this extension on the reviewer's machine. - Exported: only when the reviewer clicks Export, into a JSON file the reviewer chooses to save and share manually.
- Deleted: when the reviewer clicks "Clear all" in the popup, when the extension is uninstalled, or when the reviewer clears their browser data for this extension.
Children
This extension is not directed at children under 13 and the author does not knowingly collect any data from such users.
Contact
For questions about this policy, reach the developer at the email listed on the Chrome Web Store listing.