Privacy Policy for JSON Schema Docs by JSONBuddy

1. Scope

This policy applies to the JSON Schema Docs by JSONBuddy Chrome extension. It explains what information the extension and the JSONBuddy documentation service process, why it is needed, how long it is retained and what choices are available to users.

2. Information processed

JSON Schema content

The extension processes a JSON Schema only after the user explicitly chooses one of these actions:

• Load JSON from the active browser tab.
• Paste JSON Schema content into the extension.
• Select a local .json file.

The extension accepts schemas up to 50 KB. It does not monitor browsing activity or read pages in the background.

Connection metadata

Standard server access logs may record operational metadata such as the IP address, timestamp, requested endpoint, user agent and response status. Request bodies containing schema content are not included in standard access logs.

3. How information is used

Schema content is used only to:

• Generate the HTML and SVG documentation requested by the user.
• Return the generated document to the extension.

Connection metadata may be used to operate, secure and troubleshoot the service and to prevent abuse. It is not used to build advertising profiles or track browsing history.

4. Storage and retention

• Submitted schemas: Processed for the request and not retained as application data or intentionally written to application logs.
• Generated documentation: Stored by the extension only in Chrome session storage so the result can be displayed. It is cleared with the browser session. A downloaded HTML file is controlled by the user.
• Consent preference: A boolean value recording that the privacy disclosure was accepted is stored locally in the user's Chrome profile. It does not contain schema content.
• Server access logs: Retained only as long as reasonably necessary for security, abuse prevention, troubleshooting and reliable operation of the service.

5. Sharing and disclosure

Schema content is transmitted only to the JSONBuddy Web API and infrastructure providers operating that service on our behalf. It is not sold, licensed, provided to advertising networks or shared for unrelated purposes.

Information may be disclosed if required by law or when necessary to protect the security and integrity of the service.

6. Chrome permissions

• activeTab: Allows the user to request JSON from the active tab.
• scripting: Reads JSON text from that tab after the user selects the command.
• storage: Stores the generated result for the browser session and remembers the consent preference.
• api.json-buddy.com: Sends the selected schema to the documentation endpoint over HTTPS.

7. Security

Schema content is transmitted to the JSONBuddy Web API using HTTPS. Generated HTML is displayed by the extension in a sandboxed frame without script execution. No remotely hosted executable code is loaded by the extension.

8. User choice and local processing

The extension asks for consent before sending the first schema. A user can avoid transmitting schema content by not using the generation command or by removing the extension.

9. Chrome Web Store Limited Use

Information received through Chrome APIs is used only to provide the extension's disclosed documentation-generation feature. Our use of that information complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

10. Changes to this policy

If the extension's data practices change, this policy and the extension's disclosure will be updated before the new practices take effect. The revision date at the top of this page identifies the latest version.