Privacy Policy — HLAdmin-Sandbox Extension
Last updated: August 3, 2026
Summary
The HLAdmin-Sandbox Extension does not collect, store, sell, or transmit any personal or sensitive user data. It contains no analytics, no tracking, and no advertising.
What the extension does
The extension is a message relay. Browsers block a secure web page from contacting a service running on your own computer. This extension provides a controlled bridge so that the HLAdmin web application can communicate with the Spinoza service running locally on your machine.
It operates only on:
-
The HLAdmin web application at
https://hladmin--hl-frontends-dev.us-central1.hosted.app -
Your local machine at
http://localhost:4000andws://localhost:4000
Requests to any other address are rejected by the extension.
Data handling
Data collected by the developer: None.
The extension passes messages between a web page you have open and a service running on your own computer. This traffic never leaves your machine and is never sent to the developer or to any third party. The extension does not read page content, browsing history, cookies, credentials, or any other browser data.
Data stored by the extension: None. The extension does not write to browser storage and keeps no records of the messages it relays. WebSocket connections are held in memory only for the lifetime of the connection and are closed when the page closes.
Data shared or sold: None. No data is transferred to any third party, is used or transferred for purposes unrelated to the extension's single purpose, or is used or transferred to determine creditworthiness or for lending purposes.
Permissions
| Permission | Why it is needed |
|---|---|
http://localhost:4000/* |
To forward requests from the HLAdmin app to the Spinoza service on your own computer. This is a loopback address; no external server is contacted. |
ws://localhost:4000/* |
To open WebSocket connections to that same local service so the app can receive streaming responses. |
| Content script on the HLAdmin domain | To receive relay requests from the HLAdmin page and pass them to the extension's background worker. The script does not read or modify page content. |
The extension does not load or execute any remote code. All code is contained in the published package.
Changes to this policy
If this policy changes, the updated version will be published at this same address with a revised “Last updated” date.
Contact
Questions about this policy can be sent to hungerlink.org.