Account Password Helper 浏览器扩展
Account Password Helper Browser Extension
核心承诺：本扩展不会将您的任何数据发送到外部服务器。所有密码数据均加密存储在您的本地浏览器中。
Account Password Helper（以下简称"本扩展"）是一款开源的 Chrome 浏览器扩展，用于管理和自动填充账号密码。本隐私政策说明我们如何收集、使用和保护您的信息。
本扩展的源代码完全开源，您可以在 GitHub 上查阅和审计所有代码。
本扩展不收集任何用户数据。具体来说：
所有数据仅存储在您的本地浏览器中（使用 Chrome Storage Local API），不会同步到云端或任何远程服务器。
敏感数据（用户名、密码、URL、备注）使用以下加密方式保护：
主密码使用 SHA-256 加盐哈希存储，不以明文形式保存。
本扩展仅进行以下一项网络请求：
除此之外，本扩展不进行任何其他网络通信。密码的导入/导出、邮件备份提醒均为本地操作。
本扩展使用以下 Chrome 权限，每项均有明确的功能用途：
| 权限 | 用途 |
|---|---|
| storage | 在本地浏览器中存储加密后的密码数据和用户设置 |
| activeTab | 在当前标签页中检测登录表单并执行自动填充 |
| scripting | 向网页注入表单检测和自动填充脚本 |
| sidePanel | 提供侧边栏面板用于管理密码 |
| alarms | 定时检查版本更新、自动备份提醒和 Service Worker 保活 |
| notifications | 发送版本更新和备份提醒通知 |
| idle | 检测用户空闲状态以实现自动锁定 |
| clipboardWrite | 复制密码到剪贴板并自动清除 |
| clipboardRead | 读取剪贴板以验证自动清除前内容未被替换 |
| webNavigation | 监听页面导航事件以优化表单检测时机 |
| <all_urls>（host） | 在任意网站上检测登录表单并提供自动填充功能 |
本扩展在运行时不使用任何第三方服务、CDN 或外部脚本。所有代码均打包在扩展内部运行，内容安全策略（CSP）限制为仅允许加载自身资源（script-src 'self'; object-src 'self'）。
本扩展提供多种本地数据导出方式：
本扩展不会有意收集任何用户（包括 13 岁以下儿童）的个人信息。所有数据仅存储在用户本地设备上。
如本隐私政策有任何变更，将在本页面更新并标注变更日期。重大变更将通过扩展内通知提示用户。
如对本隐私政策有任何疑问，请通过以下方式联系：
Core Commitment: This extension does not send any of your data to external servers. All password data is encrypted and stored locally in your browser.
Account Password Helper (hereafter "the Extension") is an open-source Chrome browser extension for managing and auto-filling account credentials. This Privacy Policy explains how we collect, use, and protect your information.
The Extension's source code is fully open-source. You can review and audit all code on GitHub.
The Extension does not collect any user data. Specifically:
All data is stored exclusively in your local browser (via Chrome Storage Local API) and is never synced to the cloud or any remote server.
Sensitive data (usernames, passwords, URLs, remarks) is protected with the following encryption:
The master password is stored as a SHA-256 salted hash and is never saved in plaintext.
The Extension makes only one type of network request:
No other network communication occurs. Password import/export and email backup reminders are all local operations.
The Extension uses the following Chrome permissions, each with a specific functional purpose:
| Permission | Purpose |
|---|---|
| storage | Store encrypted password data and user settings locally |
| activeTab | Detect login forms and perform auto-fill on the current tab |
| scripting | Inject form detection and auto-fill scripts into web pages |
| sidePanel | Provide a side panel for password management |
| alarms | Schedule version update checks, auto-backup reminders, and Service Worker keepalive |
| notifications | Send version update and backup reminder notifications |
| idle | Detect user idle state for auto-lock functionality |
| clipboardWrite | Copy passwords to clipboard with auto-clear |
| clipboardRead | Read clipboard to verify content hasn't been replaced before auto-clearing |
| webNavigation | Monitor page navigation events to optimize form detection timing |
| <all_urls> (host) | Detect login forms and provide auto-fill on any website |
The Extension does not use any third-party services, CDNs, or external scripts at runtime. All code is bundled within the extension, and the Content Security Policy (CSP) restricts loading to self-only resources (script-src 'self'; object-src 'self').
The Extension provides several local data export options:
The Extension does not knowingly collect personal information from any user, including children under 13. All data is stored only on the user's local device.
Any changes to this Privacy Policy will be updated on this page with the revised date. Significant changes will be communicated to users via in-extension notifications.
If you have any questions about this Privacy Policy, please contact us at: