diff --git a/docs/superpowers/specs/2026-10-21-privacy-policy-design.md b/docs/superpowers/specs/2026-10-21-privacy-policy-design.md index 03c0dda..81bd7af 100644 --- a/docs/superpowers/specs/2026-10-21-privacy-policy-design.md +++ b/docs/superpowers/specs/2026-10-21-privacy-policy-design.md @@ -31,10 +31,8 @@ advice. email, although the options page links to the website and its contact form. The policy ends with mat@zavage.net for questions. The owner chose this over also covering messages or the whole website. -- **The current version only.** The policy says it describes the current - version and, at the owner's request, leaves out how earlier versions differed. - Versions 1.0 to 1.2 had Firefox fetch the search icon from zavage-software.com, - which 82fdf88 removed. +- **The current version only.** The policy describes the current version and + says so. - **#16 is fixed first.** Up to 1.3, a chat started in a private window can open in a normal window. The owner chose to fix that before publishing rather than disclose it, so the policy doesn't mention it. @@ -59,7 +57,7 @@ advice. | Claim | Evidence | | --- | --- | -| Zavage Software receives nothing | The code has no `fetch`, `XMLHttpRequest`, `sendBeacon`, `WebSocket` or `EventSource`, and the manifest has had no `favicon_url` since 82fdf88. | +| Zavage Software receives nothing | The code has no `fetch`, `XMLHttpRequest`, `sendBeacon`, `WebSocket` or `EventSource`, and the manifest has no `favicon_url`. | | Settings stay in Firefox and sync only through Firefox Sync | `lib/settings.js:37-60` uses `storage.sync`, the only storage API in the code. | | Three permissions, and no host access | `manifest.json:25`: `storage`, `menus` and `activeTab`. | | The manifest declares no data collection | `manifest.json:18` |