1. How your extension package is processed
When you drop a .zip or .crx into CWS Submission Copilot, the file is unzipped using browser-native APIs and each file is analyzed in memory inside the tab. No source file, no manifest value, and no listing text is ever transmitted to a server operated by us or anyone else.
The analysis runs entirely offline once the extension is installed. It does not require a network connection to scan your package.
2. What the extension cannot see
CWS Submission Copilot does not use content scripts and does not hold a broad host permission like <all_urls>. This means it cannot read the web pages you visit, cannot see any text on those pages, and cannot inject code or analytics into any website. Its access is limited to the .zip or .crx file you explicitly drop into it.
3. Permissions and why each one is needed
| Permission | Why it is needed |
|---|---|
| storage | Saves your settings, license status, and scan history (filenames and readiness scores only) locally on your device. Nothing is synced to a remote server. |
| downloads | Saves exported scan reports to your downloads folder. Used only when you explicitly click the export button. |
| peakproductivity.online | The only external host the extension can reach. Used for anonymous license verification, anonymous usage events, and optional user-submitted feedback (see Section 4). Your extension code is never sent to this host. |
There are no content scripts and no host permissions for your websites or any other domains.
4. Network requests the extension makes
CWS Submission Copilot makes only the following outbound requests, all to our own server at peakproductivity.online. It makes no others.
- Anonymous license check. Sends a randomly generated device ID to verify whether a Pro license is active in this browser. Contains no name, email, source code, or personal data of any kind.
- Anonymous usage events. Sends the event name (for example "installed" or "used a feature"), the same random device ID, and the extension version number. No personal data, no extension package contents, no browsing data. These are aggregated to understand which features are used so we can improve the product.
- Optional user-submitted feedback. If you choose to respond to the in-extension rating prompt, your feedback message is sent. This is triggered only by your explicit action and you can dismiss the prompt without sending anything.
There are no third-party analytics SDKs, no advertising networks, and no third-party data recipients in any of these requests. Your extension source files are never part of any network call.
5. Scan history stored locally
When scan history is enabled (Pro feature), the following data is stored in Chrome's local extension storage on your device only. It is not synced to any cloud or server:
- Filenames of the .zip files you have scanned
- The readiness score and finding counts for each scan
- The date of each scan
The actual source code from your extension is never stored, only the summary metadata above. All scan history is cleared automatically when you uninstall the extension.
6. Data we do not collect or sell
We do not sell, rent, or share your data with third parties. There are no advertising pixels, no third-party analytics SDKs, and no cross-site profiling. No account or sign-up is required to use CWS Submission Copilot.
7. Children's privacy
CWS Submission Copilot is a developer tool intended for Chrome extension developers. It is not directed at children under 13 and does not knowingly collect any information from children.
8. Changes to this policy
If we make material changes we will update the date at the top of this page. Significant changes will also be noted in the extension's changelog on the Chrome Web Store.
9. Contact
Questions about this policy? Contact us at support@peakproductivity.online.