Chrome add-ons just became less scary, security-wise
Google has tightened the rules for admission to the Chrome Web Store, the online bazaar for add-ons to its browser.
The big change to the Alphabet subsidiary's User Data Policy is that third-party party developers are no longer permitted to move personal data in plain text. Developers must also create and publish a privacy policy explaining what data they collect using Chrome, how it is used and apply “modern cryptography” when the data is in transit.
Privacy policies “... must, together with any in-Product disclosures, comprehensively disclose how your Product collects, uses and shares user data, including the types of parties with whom it’s shared.” Google will check to ensure the policy is included in the dashboard offered to developers and made prominent on the installation page.
