Dear Mozilla, if you’re going to make me wait months for a review at least try to understand my WebExtension and bother to figure out what it does. At the very least, read the README.md. Your reviewer clearly did not. I finally got a code review email today and it contains nothing actionable and reflects a complete failure to understand even the most basic goals of my extension, in fact the reviewer suggested creating a serious security issue would be necessary for my extension to pass review.
- The user must be provided with an opportunity to refuse the storage of or access to cookies, and must be informed of the consequences of doing so (e.g., without a functional cookie, the add-on may not work). Installing cookies that are not explicitly required for the add-on’s functionality is prohibited. Please see https://extensionworkshop.com/documentation/develop/best-practices-for-collecting-user-data-consents/ for an example of how to present the consent. For more information, refer to https://extensionworkshop.com/documentation/publish/add-on-policies/#data-disclosure-collection-and-management .
I don’t install cookies, I delete them, and I don’t transmit cookies anywhere. Your comments suggest A) That you’ve completely misunderstood the purpose and functionality of my extension and B) that you didn’t actually bother to review the code, which has been my suspicion for the past several months. To clarify, there are no cookies created by the extension for the user to refuse, and should the user refuse to allow the extension to delete cookies related to I2P use then the extension fails to accomplish it’s very most basic goal, which is to isolate and manage I2P traffic and history. Adding the capability would be an anti-pattern that would make my users unsafe and I won’t do it.
- Please add a privacy policy to this add-on that details which user data is being sent and to what services. The critical things to describe in the policy are how your extension collects, uses, stores, and shares or discloses information about people.If your add-on makes it apparent to websites that it is installed, this must also be mentioned. The privacy policy should be about the extension only, not a copy of the website's privacy policy. It should also be the actual text, as opposed to a link to a privacy policy on a website. The privacy policy can be added in the add-on settings under “Manage Authors & License” on AMO.
I have had a privacy policy in my add on for most of it’s existence, the fact that you did not see it suggests strongly to me that you didn’t bother to review my addon at all. I have, for the sake of your inability/refusal to read the README.md, or indeed the second paragraph on the website for the extension itself: https://eyedeekay.github.io/I2P-in-Private-Browsing-Mode-Firefox/ added it to the named section.
Do better and stop wasting my time.
idk