隐私政策 · AB 实验工具箱
一句话总结：本扩展不向开发者或任何第三方发送数据。它只在你已经登录的实验平台页面上工作， 所有数据处理都在你的浏览器本地完成。
我们收集什么
不收集。本扩展没有开发者运营的服务器，没有埋点 SDK，没有崩溃上报，不接入任何分析或广告服务。 开发者无法获知你如何使用本扩展，也无法获得你在扩展内看到的任何内容。
本扩展在本地处理哪些数据
为了让功能可用，本扩展会在你的浏览器内读取和处理以下内容。这些内容不会离开你的设备 （下述「发送至实验平台」的请求除外，且接收方是你本人已登录的平台，不是开发者）：
| 数据类型 | 具体内容 | 用途 |
|---|---|---|
| 网页内容 | 实验平台页面上的指标名称、筛选状态、结果表格内容；页面发出的 fetch/XHR 响应体（指标 SQL、指标数据） | 渲染工具面板、展示指标与 SQL、发起下钻查询 |
| 认证信息 | 你当前在实验平台上的登录态；用于换取平台个人密钥的鉴权请求 | 代你向平台查询数据，避免重复登录 |
| 个人身份信息 | 你在「查询全局命中」中主动输入的用户标识（UID / 分流 ID） | 查询该标识命中的实验与分组。标识由你输入，仅发送至你已登录的实验平台 |
| 个人通讯 | 在你已打开的 AI 助手会话页面上读取会话内容 | 取回该会话生成的报告并在面板内展示 |
此外，界面偏好（面板开关状态、折叠状态等）通过 chrome.storage.local 保存在浏览器本地。
数据发送到哪里
本扩展发出的全部网络请求，目标都限定在 manifest.json 的 host_permissions 中声明的实验平台域名（共 9 个）。这些请求：
- 直接发往你本人已登录的实验平台；
- 不经过开发者的服务器，也不经过任何第三方服务器；
- 不包含任何用于识别你个人身份的开发者侧标识。
本扩展不使用 <all_urls>，也不会在与实验平台无关的网站上注入脚本或读取内容。
数据保留与删除
- 本地保存的界面偏好与短期鉴权缓存，可通过移除本扩展一并清除；
- 开发者侧没有任何数据副本，因此不存在开发者侧的数据保留或删除请求流程。
权限说明
| 权限 | 用途 |
|---|---|
storage | 在本地保存界面偏好与短期鉴权状态 |
clipboardWrite | 在你点击「复制 SQL」时把文本写入剪贴板 |
activeTab | 你点击工具栏图标时，向当前标签页的内容脚本发送开关面板的消息 |
host_permissions（9 个实验平台域名） | 在实验平台页面上注入工具面板并读取该页面已展示的数据 |
适用人群
本扩展面向已获得相应 AB 实验平台访问权限的用户。未获得该平台访问权限时， 本扩展不会在任何页面注入内容，也不会被触发。
Privacy Policy · AB Experiment Toolbox
In one sentence: this extension does not send data to the developer or to any third party. It only works on the experiment platform pages you are already signed in to, and all processing happens locally in your browser.
What we collect
Nothing. There is no developer-operated server, no analytics SDK, no crash reporting, and no advertising or analytics service of any kind. The developer cannot see how you use the extension, nor any content you see through it.
What the extension handles locally
To make its features work, the extension reads and processes the following inside your browser. None of it leaves your device, except for the requests described below, which go to the platform you are already signed in to — never to the developer.
| Data | Details | Purpose |
|---|---|---|
| Website content | Metric names, filter state and result tables on the experiment platform pages; fetch/XHR response bodies issued by those pages (metric SQL and metric data) | Render the toolbox panel, display metrics and SQL, and start drill-down queries |
| Authentication information | Your existing session on the experiment platform, and the auth request used to obtain a personal platform key | Query data on your behalf without asking you to sign in again |
| Personally identifiable information | The user identifier (UID / split ID) you type into "Global hit lookup" | Look up which experiments that identifier was assigned to. You supply it; it is sent only to the platform you are signed in to |
| Personal communications | Conversation content on an AI assistant page you have already opened yourself | Retrieve the report that conversation generated and show it in the panel |
UI preferences (panel open/collapsed state) are stored locally via chrome.storage.local.
Where data is sent
Every network request the extension makes is limited to the experiment platform domains declared in
manifest.json (host_permissions, 9 domains). These requests go directly to the
platform you are signed in to, never through a developer or third-party server, and carry no
developer-side identifier for you. The extension does not use <all_urls> and injects
nothing on unrelated sites.
Retention and deletion
Locally stored preferences and the short-lived auth cache are cleared when you remove the extension. The developer holds no copy of any data, so there is no developer-side retention or deletion process.
Permissions
| Permission | Purpose |
|---|---|
storage | Store UI preferences and short-lived auth state locally |
clipboardWrite | Put text on the clipboard when you click "Copy SQL" |
activeTab | When you click the toolbar icon, message the content script in the current tab to toggle the panel |
host_permissions (9 experiment platform domains) | Inject the toolbox panel on experiment platform pages and read the data already displayed there |
Who this is for
This extension is intended for users who already have access to the relevant AB experiment platform. Without that access it injects nothing into any page and is never triggered.