Privacy Policy — CaptchaPlugin (Chrome Extension)
Last updated: Sep 19, 2025
Overview
CaptchaPlugin runs only inside reCAPTCHA frames and adjusts the widget (e.g., enforce hl=en
) per user settings. It does not read or collect the content of the pages where the CAPTCHA is embedded.
Data We Collect
- Extension settings & state (local only): feature toggles and small operational state (e.g., reporting config/status).
- CAPTCHA logs (from reCAPTCHA frames only): technical events about the challenge (e.g., type, grid size, timestamps).
- CAPTCHA images (challenge tiles only): stored locally to improve recognition and troubleshooting; deduplicated by hash.
We do not collect browsing history, page text, cookies, or form data.
How We Use Data
- To provide the extension’s functionality (language enforcement and challenge handling).
- To diagnose issues, improve recognition quality, and ensure reliability of uploads.
Where Data Is Stored & For How Long
- Locally: in your browser (Chrome storage and IndexedDB). Old items may be pruned automatically to save space.
- Server-side uploads (optional): if enabled, small NDJSON batches of logs/images may be sent to our service to improve performance and stability.
Sharing
We do not sell data. Data is shared only with service providers necessary to operate the upload endpoint, under confidentiality obligations, and only for the purposes listed above.
Permissions We Request
- storage — save user settings and small operational state locally.
- scripting — register/check content scripts that run inside reCAPTCHA frames.
- declarativeNetRequest — enforce
hl=en
and apply specific request rules for reCAPTCHA when needed. - alarms — schedule lightweight background tasks (e.g., periodic upload attempts).
- idle — defer non-urgent tasks to idle/locked periods to reduce impact.
- Host access — limited to
*.google.com/recaptcha/*
; the extension doesn’t access surrounding page content.
Your Choices
You can disable or remove the extension at any time via the browser’s extension manager. You can also clear local data by removing the extension. For server-side deletion requests, contact us (see below).
Security
We use reasonable technical and organizational measures to protect data in transit and at rest.
Children
The extension is not intended for use by children under 13.
Changes
We may update this Policy. Material changes will be reflected by updating the “Last updated” date above.
Contact
Email: [email protected]