Privacy Policy for ChronoDOM
1 Core Privacy Commitment
ChronoDOM is built on a Zero-Leakage, Local-First privacy architecture. We believe that your work, form inputs, configuration drafts, and admin updates belong solely to you.
ChronoDOM does not collect, transmit, sell, or analyze your personal information, form values, browsing history, or keystrokes. All extension functionality executes 100% offline and locally inside your browser's sandboxed storage.
2 Information Handled by ChronoDOM
When you type into web forms or configure settings across web applications, ChronoDOM captures:
- Form Field Values: Text inputs, multiline textareas, dropdown selections, checkboxes, radio toggles, and rich-text contenteditable blocks.
- Page Metadata: Webpage Title, URL path, and timestamp.
- Trigger Classification: Categorization of how the snapshot was taken (Live Auto typing, Custom Timer History, Tab Sleep Shield, Crash Guard, or Manual trigger).
All snapshot records are written directly to your browser's local IndexedDB storage on your computer. No snapshot data is ever sent to external cloud servers, remote analytics providers, advertising networks, or third-party APIs. Browser IndexedDB storage is maintained locally in your browser user profile. If you handle sensitive enterprise data, we recommend enabling standard operating-system disk encryption (such as Microsoft BitLocker or Apple FileVault) to protect all local files at rest.
ChronoDOM implements layered privacy filtering to protect sensitive credentials and data:
1. Always-Active Protection (Baseline Security):
- Password Fields Excluded: All
<input type="password">elements are strictly filtered out and never recorded. - Credit Cards & CVVs: Fields carrying
autocomplete="cc-number",cc-csc,cc-exp,cvv,cvc, or security code attributes are strictly excluded. - Hidden Form Tokens: All
<input type="hidden">elements and visually hidden elements (aria-hidden="true",display: none) are ignored to avoid capturing CSRF tokens or ephemeral session IDs. - Automated 30-Day Retention: Unstarred snapshots older than 30 days are automatically pruned from local storage to prevent stale data accumulation.
2. Enhanced Privacy & Domain Guard (Configurable via Settings):
Users can optionally toggle the Enhanced Privacy Guard switch in the Extension Settings modal at any time to activate:
- Built-in Domain Blocklist: Automatically disables recording across major banking institutions, payment processors, healthcare portals, identity providers, and tax services.
- One-Time Passwords & 2FA (OTPs): Verification fields with
autocomplete="one-time-code"or 2FA/MFA patterns are excluded. - API Keys & Developer Secrets: Values matching secret formats (such as
sk_live_,ghp_, Bearer tokens, or private keys) and Social Security Numbers are dropped.
3 Browser Permissions Justification
ChronoDOM adheres strictly to the principle of least privilege, requesting only permissions essential to its core recovery capabilities:
| Permission | Technical Need & Purpose |
|---|---|
storage |
Persists user preferences (capture mode, interval timers, privacy switches) and coordinates snapshots in local IndexedDB. |
sidePanel / sidebarAction |
Renders the Git-style time-travel history and visual diff viewer in the browser's side panel docked beside the active tab. |
activeTab & scripting |
Scans form fields on the active webpage and injects framework-safe DOM hydration when the user clicks "Restore". |
alarms |
Runs background timer triggers for user-configured history checkpoints and runs local maintenance cleanup cycles. |
host_permissions (<all_urls>) |
Enables universal form recovery across any web application or portal the user works on (admin consoles, CMSs, ERPs). All scanning and saving is executed 100% locally; no web traffic or content is transmitted externally. |
4 Third-Party Services & Telemetry
- Zero Tracking / Analytics: ChronoDOM contains no Google Analytics, tracking pixels, telemetry SDKs, or behavioral monitoring scripts.
- No Outbound Network Calls: The core extension performs zero network requests during normal operation.
- Optional License Validation: If enterprise license verification is activated, the extension connects solely to the official verification endpoint over secure TLS to validate the license key. Form snapshot contents are never included in verification requests.
5 User Control, Portability & Deletion
You maintain complete ownership of every record saved by ChronoDOM:
- One-Click JSON Export: Export your entire timeline into a human-readable, portable JSON backup file at any time via the Settings menu.
- JSON Import: Easily migrate or restore your timeline across different browser profiles or workstations.
- Granular Deletion: Delete individual snapshots, clear all history for a specific URL, or purge an entire tracked domain in a single click.
- Clean Uninstall: Removing the extension from your browser immediately and permanently erases all IndexedDB tables and local configuration data.
6 Regulatory & Policy Compliance
Children's Privacy: ChronoDOM is a professional web productivity tool designed for general web users and developers. It does not knowingly collect or target information from children under 13.
Policy Updates: We may update this Privacy Policy periodically to reflect new features or regulatory requirements. Any updates will be published directly to this page and referenced within the extension repository.
7 Publisher Information & Support
For questions or feedback regarding this Privacy Policy or ChronoDOM's privacy practices, please contact us:
FastEnd Technologies & Services
Official Website: https://fastendtech.com/
Contact & Support: https://fastendtech.com/contact/
Direct Inquiries: contact@fastendtech.com