Chrome Extension

1. What is the extension?

The ChineseSRS Chrome extension highlights and identifies Chinese words on web pages. It lets you see definitions, pinyin, and add words to your SRS from any page.

2. Data Collected

• Authentication token (JWT) :stored locally to maintain session
• Refresh token :automatic rotation on each use
• User preferences :language, theme, highlighting (stored locally)
• Last 20 searches :stored locally
• Dictionary cache :refreshed every 24h

3. Data NOT Collected

• Your browsing history
• Content of pages you visit
• Your passwords or credentials
• Location data
• Data for advertising purposes
• Data shared with third parties

4. Server Communication

No data is sent to any other server. All requests are encrypted.

• Communication exclusively with chinesesrs.com via HTTPS
• Dictionary word lookup
• Authentication status check
• Adding words to SRS or queue
• Authentication token refresh

5. Local Storage

• Data stored in chrome.storage.local (isolated and secure)
• Not accessible by websites
• Not accessible by other extensions
• Automatically deleted on uninstall

6. Extension Permissions

7. Security

• JWT with expiration (7 days) and automatic refresh token rotation
• Message origin validation (chinesesrs.com only)
• Strict Content Security Policy
• All communications encrypted via HTTPS/TLS
• Client and server-side rate limiting
• Protection against XSS injections