Browser extension AI chat exfiltration: Difference between revisions
Corrections from James Arnott |
Add side-by-side evidence image for the privacy-policy / Chrome Web Store contradiction |
||
| Line 120: | Line 120: | ||
Arnott also documented a direct contradiction between the privacy disclosures of the Stylish extension & its Chrome Web Store listing. The Stylish privacy policy, per his reading, explicitly states the publisher sells personal data; the Chrome Web Store listing's larger-font homepage text states that the publisher does not sell personal data; & the Chrome Web Store's approved-use-cases policy itself prohibits the sale of user data.<ref name="aibp-stylish" /> | Arnott also documented a direct contradiction between the privacy disclosures of the Stylish extension & its Chrome Web Store listing. The Stylish privacy policy, per his reading, explicitly states the publisher sells personal data; the Chrome Web Store listing's larger-font homepage text states that the publisher does not sell personal data; & the Chrome Web Store's approved-use-cases policy itself prohibits the sale of user data.<ref name="aibp-stylish" /> | ||
[[File:Stylish_privacy_policy_vs_Chrome_Web_Store_listing.png|thumb|center|600px|Left: Stylish privacy policy stating personal data is sold. Right: Stylish Chrome Web Store listing claiming the opposite in larger type. Captured from Wayback Machine snapshots cited in the source.]] | |||
==Consumer impact & mitigation== | ==Consumer impact & mitigation== | ||