Privacy Policy

Overview

This privacy notice explains how the Blood Serology Helper browser extension handles authentication tokens and related account details. It is short, focused, and written for users of the extension. No other personal data is collected or transmitted by the extension beyond what is described below.

Data Collected

What we collect

• Authentication tokens (for example JWTs or cookie strings) that are present in the page context and are necessary to read the user’s account details from https://my.blood.co.uk.
• Account details returned by the site’s api/account/v2/details endpoint when the extension observes that response (only the fields required to display the serology shortHand).

What we do not collect

• We do not collect browsing history, passwords, or any unrelated personal files.
• We do not collect or transmit tokens or account data to third parties except as described below.

Purpose and Use

Why we collect tokens and details

• To detect when a user logs in and to retrieve the donor serology.shortHand so the extension can display it in the page UI.
• To forward the minimal account details required for the UI insertion.

How the data is used

• Tokens are used only to request the site’s account details from the same origin.
• Account details are used only to populate the serology UI element in the current browser tab.

Storage Security and Access

Where data is stored

• The extension may store a single token preview in the extension’s local storage for convenience; this is stored locally on the user’s device only.
• Full account responses are not sent to external servers.

Security measures

• Stored data is kept in the browser extension storage area accessible only to the extension.
• The extension does not transmit tokens or account details to any external service or analytics provider.
• Debug logs that previously contained token fragments have been removed; logs no longer include sensitive token values.

Retention and Deletion

How long data is kept

Tokens and account details stored by the extension are retained only as long as the user keeps the extension installed or until the user clears the extension storage.

How to delete data

• To remove stored data, uninstall the extension or clear the extension’s local storage via the browser extension settings.
• If you want the extension to forget stored data immediately, uninstall and reinstall the extension.

Contact and Changes

Contact

For questions or requests about data handling, contact: craig@catapedamania.com.

Policy changes

This notice may be updated occasionally. Material changes will be reflected in the extension listing and in an updated version of this notice.

Short Summary

The extension only reads tokens and the minimal account fields needed to show serology.shortHand, stores data locally, does not send data to external servers, and will not attempt details requests unless a valid bearer token is present.