Privacy policy for ExpandIt - Scrollbar Expander
ExpandIt - Scrollbar Expander by sovkit
Privacy Policy
This extension does not collect, store, or share any personal or sensitive user data.
Permissions
storage — Used to save user preferences (such as expand mode, site lists, theme, and language) and license status locally on the device. If you set up your own storage endpoint, its credentials are kept here too and never leave the device.
alarms — Used to periodically refresh license status, check for product notices, and — only if you turn on sync — check your own storage endpoint for settings changed on your other devices.
sidePanel — Used to open the extension's side panel, which is its only user interface.
content script access (all sites) — Required to run a content script on the page you are viewing, which measures element widths to find content cut off by a horizontal scrollbar and adds an expand button next to it.
optional host access — Not requested at install time. If you choose to sync your settings to a storage endpoint of your own, the extension asks for access to that one address only, so that it can reach it.
The content script only measures layout and reads the page's own domain to apply your site settings. Page content is never read for any other purpose, stored, or transmitted. All settings remain local to the user's browser unless you turn on the optional sync described below.
Bring your own storage
Cross-device sync is optional and off by default. When you turn it on, you supply your own storage endpoint, and your settings — the expand mode, your site lists and per-site rules, plus theme and language — are exchanged directly between your devices and that endpoint. We operate no sync server, never receive that data, and never see the endpoint's credentials — they are stored only on your device.
Network communication
Apart from a storage endpoint you configure yourself, the extension only communicates with our first-party servers. api.sovkit.com handles optional Pro license management, which occurs when the user explicitly initiates a purchase or activates a license key; the only data sent is the license key, a device identifier, and an email address during checkout. data.sovkit.com hosts a static announcement file that the extension downloads periodically to show product notices; this request sends no data about you and returns the same file for everyone. No page content, browsing history, or other personal information is ever transmitted.