docs: add security and store review guidance

2026-07-29 19:30:58 +10:00
parent 51edff809a
commit e61ee85885
3 changed files with 214 additions and 0 deletions
@@ -0,0 +1,47 @@
+# Hudra Privacy Policy
+
+Effective date: 29 July 2026
+
+Hudra is a browser extension that turns supported QLearn and Canvas lesson pages into a classroom presentation. Hudra processes lesson page content locally in the user's browser to provide this feature.
+
+## Information Hudra handles
+
+When the user starts Hudra, the extension reads the content and structure of the active supported lesson page. This website content may contain information entered into or displayed by QLearn or Canvas. Lesson content and generated current/next slide previews are processed temporarily in browser memory during the active presentation.
+
+Hudra keeps only temporary presentation-session metadata in `chrome.storage.session`, including the presentation mode and presentation tab and window identifiers. This metadata coordinates and restores an active presentation and is cleared when the browser session ends.
+
+## How information is used
+
+Lesson page content is used only to generate and display the presentation requested by the user. Temporary session information is used only to coordinate presenter and audience windows and restore the normal lesson page when presentation mode closes.
+
+## Collection, transmission and sharing
+
+Hudra does not transmit lesson content or generated slide previews to Napper.au. It does not transmit browsing activity, credentials, personal information or presentation-session metadata to Napper.au or other third parties.
+
+Hudra includes no advertising, analytics, telemetry, tracking or remote executable code. It does not sell or share user data.
+
+Existing lesson resources, such as images, videos and embedded media, continue to load from the original providers referenced by the lesson page. Hudra does not proxy those resources through Napper.au.
+
+## Storage and retention
+
+Hudra does not write lesson content or generated slide previews to `chrome.storage`. Active presentation metadata is stored only in Chrome's session-scoped extension storage and is not synchronized to external services.
+
+## Permissions
+
+- `activeTab` provides temporary access after a toolbar click or keyboard shortcut so Hudra can inspect the selected page or show an unsupported-page notice.
+- `scripting` injects only packaged page-detection and presentation code.
+- `storage` holds temporary session metadata only, using `chrome.storage.session`.
+- `system.display` detects displays for presenter and audience window placement.
+- QLearn and Instructure host access permits Hudra to run on supported lesson pages. It is particularly required for a newly created dual-screen audience tab because the original tab's `activeTab` grant does not transfer to that tab.
+
+Hudra activates only after an explicit toolbar click or keyboard shortcut.
+
+## Changes to this policy
+
+If Hudra's data practices change, this policy and the Chrome Web Store privacy disclosures will be updated before the changed version is published.
+
+## Contact
+
+Privacy questions can be submitted through the support link on Hudra's Chrome Web Store listing.
+
+The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.