1. Privacy Policy

This Privacy Policy provides comprehensive disclosures regarding user data collection, processing, storage, retention, sharing, security, and deletion procedures for the Fiktu Image Toolbox browser extension (the "Extension").

1.1 Overview & Scope

Fiktu Image Toolbox is designed to assist users in viewing, filtering, organizing, and batch-downloading images and media elements from web pages that users actively visit. We are committed to maintaining the highest level of user privacy and transparency.

1.2 Executive Summary

1.3 Data Collection (What Information We Collect)

We collect and process only the minimum necessary data required to operate and improve the Extension's core features. The data collected is categorized below:

A. Account & Authentication Data (Only if you voluntarily sign in)

• Personal Data Account Credentials & Identity: User ID, authentication token, email address, display name, and subscription/VIP status.
• Purpose: To verify your account, unlock subscription/pro features, and sync custom settings across devices.
• Storage: Stored locally in chrome.storage.local as key ext_auth. Account tokens are refreshed over HTTPS.

B. Web Page Content & Image Metadata (Processed locally upon user trigger)

• Technical Data Image Elements & Media URLs: Image source URLs, dimensions (width/height), file format, and DOM container selectors on the open webpage.
• Purpose: To display image previews, filter images by resolution or type, and trigger browser downloads.
• Storage: Held temporarily in browser memory (RAM) during your active session. Not saved to server or disk.

C. Page Context & Hostname Data

• Technical Data Active Tab Page Title and Hostname: Page title and domain name (e.g., www.example.com).
• Purpose: To suggest download folder names, apply site-specific image extraction rules, and send domain-level anonymous stats.
• Storage & Transmission: Full URLs are never transmitted. Only the hostname is used for anonymous statistics.

D. Feature-Specific Technical Data (Optional user actions)

• AI Rule Generation Data: DOM element structure and image URL patterns on the current page, sent only when you actively click the "AI Rule Generator" feature. Processed in real time via HTTPS at https://www.fatkun.net/api/ext/generate-rule and discarded immediately after returning the rule.
• E-Commerce Export & Search Data: Product IDs, product titles, shop identifiers, or base64 image data sent only when you actively use e-commerce export or visual product search features in the side panel.
• User Custom Download Rules & Directory Tree: Custom URL rewrite rules and directory names created by you. Synced to your Fiktu account if signed in to persist across devices.

E. Anonymous Usage & Performance Analytics

• Analytics Data Aggregate Operational Events: Feature click counts (e.g. download toggle), extension version number, random Client UUID, session timestamps, and page hostname.
• Purpose: To monitor extension performance, identify broken site rules, and guide technical improvements.
• Recipient: Google Analytics 4 (via Measurement Protocol). No full page URLs, search queries, or user identifiers are included.

1.4 Data We Do NOT Collect

To ensure complete user privacy, the Extension explicitly does NOT collect, record, transmit, sell, or monitor any of the following:

• Browsing history (complete list of URLs visited).
• Full web page text content, articles, or comments.
• Form input data, passwords, or login credentials for third-party websites.
• Personal communications (emails, chat messages, contacts).
• Financial, payment, credit card, or health data.
• Precise GPS or device location data.
• Keystroke logging or mouse movements.

1.5 Data Processing and Use (How We Process Your Data)

All data collected or processed by the Extension is strictly limited to providing, maintaining, and improving the user-facing functionality of the Extension.

1.6 Data Storage, Security, and Retention Periods

We implement robust technical and organizational security measures to protect user data against unauthorized access, loss, or alteration.

A. Storage Locations & Security Measures

• Local Device Storage: Preferences, authentication tokens, and custom settings are stored locally on your device using chrome.storage.local. Access is isolated strictly to the Extension runtime via browser sandbox security.
• Data in Transit: All communications between the Extension and backend servers (account authentication, rule sync, AI rule generation) use secure HTTPS / TLS 1.3 encryption.
• Server Storage: Account data and synced rules are stored on secured cloud servers with strict role-based access control (RBAC).

B. Explicit Data Retention Periods

1.7 Data Sharing and Third-Party Disclosures

We do not share your data with third parties except as strictly necessary to operate the Extension features outlined below. All third-party service providers are bound by strict data protection obligations.

1.8 Data Deletion Procedures and User Rights

You have full control over your data. We provide clear, simple procedures for inspecting and deleting all local and server-stored data.

A. How to Delete Local Extension Data

1. Clear Storage via Chrome Settings: Navigate to chrome://extensions in your browser → Click Details under Fiktu Image Toolbox → Click Extension options or open Developer Tools (Application → Storage → Extension Storage) → Click Clear site data.
2. Uninstall Extension: Right-click the Fiktu extension icon in your browser toolbar and select Remove from Chrome. This instantly wipes all local storage, preferences, and authentication tokens from your device.
3. Sign Out: Click the Logout icon in the extension popup to remove stored authentication tokens and credentials immediately.

B. How to Request Complete Server Account Data Deletion

If you have created a Fiktu account and wish to permanently delete your account, synced rules, and all associated server records:

C. Your Rights Under Global Privacy Laws (GDPR, CCPA, etc.)

• Right of Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request correction of inaccurate data.
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your data as outlined above.
• Right to Restrict / Object to Processing: You have the right to object to or restrict processing of your data.
• Right to Data Portability: You have the right to request transfer of your synced settings and rules.

1.9 Chrome Web Store Limited Use Disclosure

1.10 Children's Privacy

The Extension is not directed to children under 13 (or the applicable legal age in your jurisdiction). We do not knowingly collect personal information from children. If you learn that a child has provided us with personal data, please contact us at fatkunimage@gmail.com so we can delete such data immediately.

1.11 Legal Basis for Processing (GDPR / EEA)

For users located in the European Economic Area (EEA) or UK, our legal bases for processing personal data are:

• Contract Performance: Processing account credentials and preferences to provide core extension services per our Terms of Service.
• Consent: Explicit consent provided when signing in, syncing rules, or invoking AI rule generation.
• Legitimate Interests: Operating anonymous analytics to maintain software reliability, prevent misuse, and fix errors.

2. Permission Justifications

The Extension requests the minimal set of Chrome permissions required to perform its core functions. Detailed explanations for each permission declared in the Extension manifest are provided below:

3. Terms of Service

3.1 License

We grant you a personal, non-exclusive, non-transferable, revocable license to install and use Fiktu Image Toolbox on devices you own or control, strictly in accordance with these Terms of Service.

3.2 Acceptable Use

• Respect Copyright & Intellectual Property: Images downloaded using the Extension may be protected by copyright. You are solely responsible for ensuring your use of downloaded media complies with applicable laws and copyright owner rights.
• Comply with Website Terms: You must comply with all applicable terms of service of websites you visit. The Extension is a client-side tool; we do not authorize or encourage violating third-party terms.
• Prohibited Actions: You may not reverse engineer, decompile, resell, or distribute the Extension binaries, nor use the Extension for unlawful scraping or malicious activity.
• Store listings: You are responsible for titles, images, and descriptions you submit or publish to a store through Fiktu. See section 3.5.

3.3 Disclaimer of Warranties

The Extension is provided "AS IS" and "AS AVAILABLE" without warranties of any kind, express or implied. We do not guarantee uninterrupted operation, error-free execution, or compatibility with every web page.

3.4 Limitation of Liability

To the maximum extent permitted by law, Fiktu developers and operators shall not be liable for any indirect, incidental, consequential, special, or punitive damages arising from your use of or inability to use the Extension.

3.5 Listings and Intellectual Property

This section applies to the Fiktu website, the collection extension, and any feature that submits or publishes product materials to a third-party store.

• Your store is the publisher. You are fully responsible for titles, images, descriptions, variants, and other product materials that you collect, edit, generate, submit, or publish through Fiktu.
• Rights required before publishing. You confirm that you own those materials or have authorization from the rights holder, and that publishing them complies with the source site’s terms, the destination platform’s rules, and applicable law.
• Prohibited content. You may not use the service to copy others’ copyrighted works without authorization, sell counterfeits, or infringe trademarks, patents, trade secrets, or other intellectual property.
• Collected drafts. Images and copy collected into a draft may be protected by copyright. Saving a draft does not authorize you to publish those materials on another store as-is.
• AI output. Titles, copy, and images generated or rewritten by AI are for you to review before use. Any review we perform does not warrant ownership, legality, or accuracy. If we label content as AI-generated, you must not remove, alter, or hide that label for an unlawful purpose.
• Enforcement. If we determine that you have violated these terms, we may warn you, suspend, or terminate the relevant service. When a law or competent authority requires it, we may provide account and usage records as required by law.

4. Changes to this Policy

We may update this Privacy Policy and Terms of Service periodically to reflect technical or legal changes. Updates will be posted on this page with an updated "Last updated" date. Continued use of the Extension after changes take effect constitutes acceptance of the revised policy.

5. Contact Information & Data Requests

For any questions, data access requests, or account deletion requests, please contact our privacy compliance team:

• Official Support & Privacy Email: fatkunimage@gmail.com
• Response Time: We review and respond to all verified requests within 30 days.