Privacy policy – Dialboard
Full version (German and English): https://nibelungencode.github.io/dialboard-site/privacy.html

Controller: Nibelungen Code – Michael Bock, Steyregg, Austria · nibelungencode@googlegroups.com

In short
Dialboard has no server of its own, no accounts, no analytics and no ads. Your speed dials, groups, settings and images are stored in your browser. The developer receives none of it. The extension only contacts the services listed below when you use the matching feature, and Firefox asks for your consent before data is sent to any of them.

What leaves your device, and when
- Browser sync (optional, your browser's own setting): dials, groups and settings, handled by the browser vendor.
- Google Drive sync (optional, only after you click "Connect Google Drive" and give consent): dials, groups, settings and your own images, stored in the hidden app data folder of your Google account (scope drive.appdata). The extension cannot read or change your other Drive files.
- Optional permission "all websites": favicons, page titles and screenshots are fetched from the sites you added as dials, without cookies or referrer.
- Icon search "From the site" (only on click, with consent): the domain name of the site is sent to Google and DuckDuckGo.
- Picture search (only on click, with consent): your search term goes to DuckDuckGo, Wikimedia Commons and Iconify. Daily wallpaper (only on click) asks Bing, without a search term.
- Bookmarks are only read to show and manage them, and are never sent anywhere except as part of the optional Drive sync of your dials. History is only read with the optional permission, for address suggestions and the "Most visited" view, and never leaves your device.

Consent
Firefox asks for consent to the data categories "bookmark information" and "browsing activity" (Drive sync), "browsing activity" (icon search) and "search terms" (picture search). You can withdraw it at any time in about:addons → Dialboard → Permissions; the matching feature then stops.

Google user data
If you connect Google Drive, Dialboard requests only https://www.googleapis.com/auth/drive.appdata. The access token is kept in the extension storage of your browser; there is no client secret. You can disconnect in Dialboard's settings and revoke access in your Google account. Dialboard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The data is used only to sync your Dialboard data between your devices. It is not shared with third parties, not used for advertising and not read by humans.

Your rights
The developer stores no personal data about you. You remove local data by uninstalling the extension; data in Google Drive can be deleted in your Google account. Questions: nibelungencode@googlegroups.com.