Chrome Transmission — Privacy Policy

1. Overview

Chrome Transmission is a privacy-first, lightweight browser extension designed to capture magnet:? links clicked on web pages or sent via context menu and route them directly to your self-hosted Transmission torrent server.

Privacy is guaranteed by architecture. There are no intermediate cloud servers, third-party analytics, or background tracking mechanisms. You retain full control over your server endpoints and credentials at all times.

2. Information Handled & Security Matrix

The table below details all data categories processed by Chrome Transmission and how they are handled:

Data Category	Content Details	Browser Storage State	Network Transmission State
Server Endpoint	Transmission IP / Domain, Port, and RPC Path	`chrome.storage.sync`	Sent Direct to Your Server Only
RPC Credentials	Transmission username & password	`chrome.storage.sync`	Sent Direct via Basic Auth Header
Magnet Link URLs	`magnet:?xt=urn:btih:...` links clicked by user	Not Stored	Direct RPC `torrent-add` Request
Extension Settings	Auto-intercept, notification, & context menu toggles	`chrome.storage.sync`	Never Sent Across Network
Browsing History	Visited websites or page content	Not Processed or Stored	Never Transmitted

3. Communication Architecture

When you interact with a magnet link on a webpage or via the extension:

Local Capture: The content script intercepts the magnet:? URL click directly inside your browser tab.
Direct Transmission RPC: The service worker sends an HTTP/HTTPS POST request directly to your configured endpoint (e.g., http://192.168.1.100:9091/transmission/rpc).
CSRF Token Negotiation: Transmission's standard X-Transmission-Session-Id challenge header is handled directly between your browser and your Transmission server.

4. Data Retention & User Rights

Chrome Transmission enforces strict data minimization:

User Control: You can edit or delete your stored server credentials at any time in the extension's Options page.
Instant Cleanup: Uninstalling the extension from Chrome instantly purges all saved settings and credentials from your local browser storage.

5. Compliance & Third-Party Policy

No Data Sales or Advertising: Your data and torrent activity are never sold, rented, or monetized.
No External Trackers: Zero Google Analytics, Facebook Pixel, or tracking libraries are included in the extension.
Chrome Web Store Compliance: The extension follows all Manifest V3 security guidelines and contains no remote code execution.

6. Contact & Support

For privacy questions, security disclosures, or support inquiries, please visit affan.dev.