Privacy Policy & Permission Justifications

This document provides justifications for the permissions requested by Midnight Gnomad and serves as a privacy statement for the Chrome Web Store.

1. Permission Justifications

storage

Why is it needed?

The storage permission is used to save and persist the user's preferences locally. This includes:

• The "On/Off" master toggle state (so dark mode remains active/inactive across browser restarts).
• The personal "Blacklist" (a list of domain names the user has chosen to exclude from dark mode).

Privacy Impact: Data is stored solely in the user's local Chrome profile. It is never synced to a remote server or accessed by the developer.

activeTab

Why is it needed?

The activeTab permission allows the extension popup to interact with the currently focused website. It is used to:

1. Verify the current domain name when the user clicks "Exclude This Domain".
2. Send an instant messaging signal to the current page to toggle styles without requiring a page reload.

Privacy Impact: This permission is temporary and only grants access when the user actively interacts with the extension.

host_permissions (<all_urls>)

Why is it needed?

To fulfill its single purpose of being a "Global Dark Mode" extension, Midnight Gnomad must be able to inject its theme-correction styles into every website the user visits.

• It requires host access to apply the invert and hue-rotate filters to the documentElement of any loaded page.
• It requires host access to detect if a site is already dark (by checking the computed styles of the body) to prevent "double inversion."

Privacy Impact: While the extension has access to run on any site, it does not read, record, or transmit any user data, passwords, or browsing history.

2. Data Usage & Privacy Statement

Midnight Gnomad is built with a "Privacy First" architecture:

1. No Data Collection: We do not collect, store, or transmit any personally identifiable information (PII).
2. No External Servers: The extension does not communicate with any external APIs or servers. All logic is executed 100% locally on your machine.
3. No Tracking: We do not use cookies, tracking pixels, or analytics. Your browsing behavior is entirely private to you.
4. No Selling of Data: Since we collect no data, we have no data to sell, trade, or share with third parties.

3. Standard Store Questionnaire Answers

Q: Why does your extension require access to "all your data on the websites you visit"?
A: Midnight Gnomad requires this permission exclusively to apply visual styling (CSS filters) to the pages you visit. This is the only way to transform light websites into dark mode. We do not use this permission to read or extract your personal data.

Q: Does this extension use or communicate with a remote server?
A: No. All extension functionality is contained within the local package.

Q: What sensitive info does this extension use?
A: None. The extension only handles its own configuration settings (On/Off state and a list of domain names for the blacklist).