Privacy Policy · WhereToSubmit - Blog Backlink Helper
This extension does not collect, upload, or share any of your data. Everything stays in your own browser on your own computer. The developer runs no server and has no way to access your data.
1. What the extension stores
The following is created by you and saved in local browser storage
(chrome.storage.local), on this device only:
- Comment library — the comment text and labels you write
- Identity profiles — the name, email, and website you type or generate
- Settings — email domain list, name style, rotation mode, toggles
- Field bindings — the hostname of sites where you manually bound a field, plus the element selector
-
Usage log — which hostnames (e.g.
example.com) each comment has been used on, so the extension can warn you about reusing the same text on one site. No full URLs, page titles, or page content are recorded.
None of this leaves your device. The extension contains no networking code.
2. What page content the extension reads
Only after you click the extension icon does it inject a script into that one tab, in order to:
- read the attributes of input fields (id, name, class, placeholder, associated label text, autocomplete, input type) to work out which field is the comment body, name, email, or website;
- read the existing content of the fields it identified, purely to tell you "this field already has something in it" (first 120 characters only);
- write your content into those fields after you press Fill.
All of this happens in memory. Nothing is written to storage and nothing is transmitted anywhere. It is gone when the tab closes.
The extension does not read: password fields (input[type=password] is never a
candidate), cookies, localStorage, browsing history, bookmarks, downloads, or any page text
outside those form fields.
3. What the extension does not do
- Sends no data anywhere — the code contains no
fetch,XMLHttpRequest,sendBeacon,WebSocket, or any other network call - Uses no analytics, telemetry, crash reporting, or advertising SDK
- Loads no remote code
- Does not sell, transfer, or share your data (there is no data to sell)
- Does not submit by default — it only fills fields. The options page has an off-by-default “Fill and submit” toggle; only if you turn it on and press that button does the extension click the submit button it detected on the page. Even then it never calls form submission and never simulates Enter, and the button is disabled when a CAPTCHA is present
4. Why each permission is needed
storage— to save the local data listed in section 1sidePanel— to show the control panelactiveTab— grants temporary access to the current tab when you click the toolbar icon, and only thenscripting— to inject the detection and filling script into the page you opened the extension on- Site access (optional) — not requested at install time. You may grant it for one site from the panel so you don't have to click the icon every time. Revocable at any time in your browser's extension settings.
Installing this extension does not show a "read your data on all websites" warning, because it requests no persistent host permissions.
5. Deleting your data
- Individual items: delete them on the extension's options page
- Everything: uninstall the extension; all local data is removed with it
- Export: "Export JSON" on the options page writes a file locally. It never passes through a server — keep it safe, as it contains the emails you saved.
6. Third parties
No third-party services, SDKs, or analytics are integrated.
Note that once you press Submit on a website, that content is handled by that website under its own privacy policy, which is unrelated to this extension.
7. Children
This extension is not directed at children under 13 and does not knowingly collect information from them (it collects no information from anyone).
8. Changes
If this policy changes, the date at the top is updated. Should any future version add a feature involving data transmission, it will be disclosed and consented to before it ships.
9. Contact
隐私政策 · wheretosubmit-博客反向链接提交助手
这个插件不收集、不上传、不共享你的任何数据。 所有内容只保存在你自己电脑的浏览器里。开发者没有服务器，也没有能力拿到你的数据。
一、插件会保存什么
以下内容由你自己创建，保存在浏览器本地存储（chrome.storage.local）中，只存在于这台设备上：
| 正文库 | 你写的评论正文和条目名称 |
|---|---|
| 身份档案 | 你填写或随机生成的昵称、邮箱、网址 |
| 设置项 | 邮箱域名列表、昵称风格、轮换方式、开关偏好 |
| 字段绑定 | 你手动指定过字段的站点域名，及对应的元素选择器 |
| 使用记录 |
每条正文用过哪些域名（例如 example.com），用于提醒你别在同一站点重复用同一条内容。
不记录具体网址、页面标题或页面内容
|
这些数据不会离开你的设备。插件没有任何联网代码。
二、插件会读取什么网页内容
只有在你主动点击插件图标之后，插件才会向当前这一个标签页注入脚本，用来：
- 读取页面上输入框的属性（id、name、class、placeholder、关联的 label 文字、autocomplete、输入类型），据此判断哪个是评论正文框、哪个是昵称/邮箱/网址框；
- 读取被识别中的那几个输入框里已有的内容，只为了在面板上提示你「这个字段已经有内容了」，最多读取前 120 个字符；
- 在你点击「填充」后，把内容写入这些输入框。
这些读取全部在内存中完成，不写入存储，不发送到任何地方，标签页关闭即消失。
插件不读取：密码框（input[type=password] 从不进入候选范围）、Cookie、localStorage、
浏览历史、书签、下载记录，也不读取正文以外的页面文本。
三、插件不做什么
- 不向任何服务器发送数据 —— 代码中没有
fetch、XMLHttpRequest、sendBeacon、WebSocket等任何网络调用 - 不使用任何统计分析、埋点、崩溃上报或广告 SDK
- 不加载任何远程代码
- 不出售、不转让、不共享你的数据（没有数据可以拿来卖）
- 默认不会替你提交 —— 插件只填写输入框。设置页里有一个默认关闭的「填充并提交」开关，只有你自己打开它、再点那个按钮，插件才会点击页面上已识别的提交按钮；即便如此也不调用表单提交、不模拟回车，页面上有验证码时该按钮自动禁用
四、权限为什么需要
storage | 保存上面第一节列出的本地数据 |
|---|---|
sidePanel | 显示操作面板 |
activeTab | 你点击插件图标时，临时获得当前标签页的访问权。不点就没有 |
scripting | 把识别和填充脚本注入到你主动打开插件的那个页面 |
| 站点访问权（可选） | 安装时不申请。你可以在面板里对某个站点一次性授权，之后在该站点不必每次点图标。可随时在浏览器扩展设置中撤销 |
安装这个插件时，浏览器不会提示「读取你在所有网站上的数据」，因为它没有申请常驻的站点权限。
五、你怎么删除数据
- 单条删除：在插件设置页删除对应的正文或档案
- 全部删除：在浏览器中卸载本插件，所有本地数据随之清除
- 备份导出：设置页的「导出 JSON」会在你本地生成一个文件，这个文件同样不经过任何服务器，请你自己妥善保管（其中包含你保存的邮箱等信息）
六、第三方
本插件不集成任何第三方服务、SDK 或分析工具。
需要说明的是：当你在网页上点击提交按钮把评论发出去后，那些内容就归该网站处理了， 适用的是那个网站自己的隐私政策，与本插件无关。
七、儿童
本插件不面向 13 岁以下儿童，也不会有意收集儿童信息（事实上不收集任何人的信息）。
八、政策变更
若本政策有变动，会更新本页顶部的日期。若未来版本新增任何涉及数据传输的功能，会在更新前明确告知并征得同意。
九、联系方式
有疑问请联系：hi@wheretosubmit.org
WhereToSubmit · wheretosubmit-博客反向链接提交助手
插件介绍 ·
Extension page ·
wheretosubmit.org