Agent Wranglers

DSK-18Recommended

Declare data use truthfully in each store

Fill in the Chrome Web Store privacy practices form and Firefox's data_collection_permissions from one list of the data the extension sends. Link a privacy policy that says the same.

By Agent Wranglers. Updated .

How to do it

Chrome asks for a single purpose, a reason for each permission, a remote code answer and a certified list of user data collected. Since 3 November 2025, Mozilla requires new extensions to declare in the manifest whether they collect or send data. Firefox 140 and later show that list at install, and users can refuse optional items. Keep one list of data in the repository, and build the manifest key and the form text from it. This is the extension form of fill in the store privacy forms from an SDK list.

Examples

JSON example

{
  "browser_specific_settings": {
    "gecko": {
      "id": "clipper@example.com",
      "data_collection_permissions": { "required": ["none"] }
    }
  }
}

How to check

The manifest has browser_specific_settings.gecko.data_collection_permissions, with "none" when nothing leaves the browser. A test compares the data list with the hosts called during an end-to-end run. It fails on a host the list does not name.

Sources

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/desktop-apps/browser-extensions/extension-data-disclosure">Agent Wranglers desktop apps, extensions and CLIs playbook</a>. In code you write, add a comment next to it with the same link.