Privacy Policy — ECZ-ID Resolver Check™

This policy describes how the ECZ-ID Resolver Check browser extension handles information. It is published by EcoCitizenz and covers the extension only. It does not cover EcoCitizenz websites, other EcoCitizenz products, or any third-party website you choose to visit.

The extension checks the page in your active tab for public ECZ-ID discovery signals and helps you request resolver-verifiable proof. It requests two browser permissions and no others: activeTab and scripting. It requests no host permissions, no storage permission and no tabs permission.

When you click the extension on a page, it inspects that page on your device and reads only the following structural signals:

• the address and hostname of the page in the active tab (location);
• link addresses on the page — the href attributes of a, link and area elements;
• rel values of link elements;
• the names and content of meta tags;
• the text of structured-data blocks (script type="application/ld+json").

These signals are turned into a result that is shown to you in the extension popup. The result exists only in memory, on your device, for as long as the popup is open. It is not written to disk and it is not transmitted.

The extension does not collect, receive, transmit or retain any of the following:

• personally identifiable information, names, addresses or account identifiers;
• health, financial or payment information;
• authentication information, passwords or credentials;
• personal communications, messages or emails;
• location data;
• the readable body text of pages you visit, form fields, form values, cookies, browsing history or bookmarks;
• keystrokes, mouse movement or any other record of user activity.

No user account is required and none is offered. The extension does not ask you for any information, and it has no field in which you could enter any.

The extension uses the activeTab permission, which grants access to a single tab only, and only after you invoke the extension in that tab. It has no standing access to any site, no access to other tabs, and no access to tabs you have not checked.

There is no automatically-running content script. The collector is placed into the page only at the moment you click the extension, using the scripting permission, and only in the tab you are checking. Once placed, it remains present in that page until you navigate or reload, but it does nothing further unless you run another check.

On browser system pages and extension-gallery pages, the browser does not permit local checks. The extension reports "unable to check" and injects nothing.

The extension makes network requests. This section describes each one.

Discovery-document requests. During a check, the extension requests up to five well-known discovery documents from the site you are already on:

• /.well-known/ecz-id.json
• /.well-known/ecz-site.json
• /.well-known/ecz-agent.json
• /.well-known/ecz-mcp.json
• /.well-known/ecz-machine.json

These requests are issued only to the origin of the page you are checking. The origin is checked before each request, and a request whose origin does not match the page is not issued. Cookies and credentials are not sent, responses are not cached, redirects are not followed, and a probe is abandoned if the site does not answer promptly. The responses are read on your device and are not transmitted anywhere.

Because these are ordinary web requests to the site you are visiting, that site can see them in its own server logs, including your IP address, exactly as it can see any other request your browser makes to it. What that site does with its logs is governed by its own privacy policy, not this one.

No requests to EcoCitizenz. The extension sends nothing to EcoCitizenz servers. It contains no analytics, no telemetry, no error reporting and no tracking code. It does not load or execute code from a remote source: every script it runs is contained in the extension package.

Links you click. The extension popup offers links. If you click one, your browser opens a new tab and loads that page — ordinary browsing, which you initiate. Some of those links point to public EcoCitizenz pages. Where the extension has detected an address on the page you checked that looks like public Resolver proof, the link may instead open that detected address, which may belong to a third party. No information about the page you checked is added to any of these links: no query parameters, no identifiers and no tracking parameters.

The extension stores nothing. It uses no browser extension storage, no local storage, no session storage, no databases and no cookies. It creates no files and writes no records.

A check result exists only in memory while the popup is open, and is discarded when the popup closes. Because nothing is stored and nothing is transmitted, there is no retention period, no archive, no backup and no server-side copy of anything the extension observed.

The extension does not sell, rent, trade or transfer your information. It does not share information with data brokers, advertisers, advertising networks or any third party, because it does not collect or transmit information in the first place.

Specifically, the extension and EcoCitizenz do not:

• sell or transfer user data to third parties;
• use or transfer user data for purposes unrelated to the extension's single purpose;
• use or transfer user data to determine creditworthiness or for lending purposes;
• use user data for advertising, retargeting or personalised advertising;
• allow humans to read user data.

The extension holds no personal data, so it has none to disclose, share or transfer — including in response to a legal request.

Starting a check. No check happens unless you click the extension. If you never click it, it inspects nothing and requests nothing.

Copying the request message. If you click the button that copies the request message, the extension writes a short, fixed, neutral message to your clipboard. Where the hostname of the page under review is known, it is appended to that message as a plain reference line, so that whoever you send it to knows which surface is being asked about. No identifiers and no tracking parameters are added. The message is placed on your clipboard only. It is not sent anywhere. You decide whether to paste it, and where.

Opening links. No page is opened unless you click a link in the popup.

Removal.You can remove the extension at any time through your browser's extensions page. Because the extension stores nothing, removing it leaves no extension data behind. There is no data for you to access, correct, export or delete, because none is collected or held.

The extension is a developer utility. It is not directed at children and does not knowingly collect information from anyone, including children, because it does not collect information from anyone at all.

If the extension's handling of information changes, this page is updated before or alongside the release that changes it, and the effective date above is revised. Where the extension is distributed through a store listing, the updated policy is linked from that listing.

Questions about this policy can be sent to support@ecocitizenz.com.

Publisher: EcoCitizenz. Contact address for privacy questions relating to this extension: support@ecocitizenz.com.