Chrome extension - Item ID ncgdildidnfopianemhdihhiiaeefdhi
Travian Toolbox ("the extension") is a browser add-on that helps players of the online game Travian find inactive villages to farm, analyse raid reports, and catalogue oases. This policy explains, in full, what data the extension collects, how it is handled, where it is stored, who it is shared with, how long it is kept, and how you can delete it.
The extension collects your email address and name (for the paid membership account) and your Travian player name and game server (to tie a membership to one game account). Everything else - game data it reads to build results - stays on your own computer in local browser storage and is never transmitted anywhere. No data is ever sold, rented, or shared with advertisers or data brokers, and none of it is used for advertising, profiling, or creditworthiness.
The extension is developed and operated by an individual developer ("we", "us"). We are the data controller for the information described in this policy. Contact details are in section 11.
The extension includes paid membership features. To create and verify a membership, we collect and transmit the following:
| Data | When it is collected | Why |
|---|---|---|
| Email address | When you register, log in, or sign in with Google | Identifies your account, enables login, and lets us contact you about your membership |
| Name (as you enter it) | When you register | Labels your account |
| Password | When you register or log in with email | Authenticates you. Sent over HTTPS and stored only in hashed form on our server; we never store it in the browser |
| Google account token | Only if you choose "Sign in with Google" | Exchanged with our server to verify your identity and read your email address and basic profile. Obtained through Chrome's identity API using the OAuth scopes openid, email, and profile |
| Travian player name and server host | When your membership is validated or activated | Locks one membership to one game account, so a licence cannot be shared between players |
| Session token | Issued by our server on successful login | Keeps you signed in. Stored locally in the browser; sent back to our server to authorise licence checks |
These requests go to https://travian-toolbox.ebrahem.dev/api/v1 over HTTPS, to
the endpoints /auth/register, /auth/login,
/auth/google, /auth/logout, /memberships,
/account-status, and /validate.
To do its job, the extension reads pages you are already logged into and viewing on your
Travian game server, and pages from inactivesearch.com. This includes:
None of the game data in section 2.2 is ever transmitted off your device.
It is written to chrome.storage.local, which lives on your own computer, and
it is read back only by the extension itself to display your results. We cannot see it.
inactivesearch.com.We use the data in section 2.1 strictly for the following purposes:
We do not use your data for automated decision-making that produces legal effects, for profiling, for advertising, or for training machine-learning models. We do not sell or rent it, and we do not transfer it to third parties for their own purposes.
chrome.storage.local on your own computer. This area is
private to the extension and is not synced to other devices by us.
travian-toolbox.ebrahem.dev. All traffic between the
extension and that server uses HTTPS/TLS. Access to the server is restricted to the
developer.
We do not sell, rent, trade, or otherwise transfer your personal data for commercial purposes. Data is shared only in these limited cases:
| Recipient | What is shared | Why |
|---|---|---|
| Google (only if you use Sign in with Google) | The OAuth exchange necessary to authenticate you | To verify your identity and return your email and basic profile. Governed by the Google Privacy Policy |
| Our hosting provider | Account data at rest, as part of hosting the licensing server | Infrastructure only; the provider processes data on our instructions and does not use it for its own purposes |
| Legal authorities | Only what is legally compelled | Where required by valid law, regulation, or legal process |
inactivesearch.com and Travian: the extension requests pages from these
sites the same way your browser would when you visit them yourself. Search requests to
inactivesearch.com are sent without your cookies or credentials.
Requests to your Travian server reuse your existing game session, because reading your own
farm lists and reports requires you to be logged in. We send no personal data of our own to
either site; their handling of your visit is governed by their own privacy policies.
Each permission the extension requests is used only for the purpose stated:
| Permission | Purpose |
|---|---|
storage | Save your settings and results locally on your device |
tabs, activeTab, scripting | Detect which game server and village you are on, and read the game pages needed to build your results |
downloads | Export your own results to a file when you click export |
identity | Optional "Sign in with Google" for your membership account |
Host access to *.travian.com, inactivesearch.com, travian-toolbox.ebrahem.dev | Read game and search pages, and contact the licensing server. The extension does not run on any other website |
You may, at any time:
To exercise any of these, email us at the address in section 11. We respond within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.
To delete local data immediately: remove the extension from
chrome://extensions. Chrome erases its local storage on uninstall.
All communication with our licensing server uses HTTPS/TLS. Passwords are stored only as salted hashes and are never stored on your device. Session tokens are held in the extension's private local storage and are invalidated when you sign out. We limit server access to the developer alone. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures appropriate to the data involved.
The extension is not directed at children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
For privacy questions, data access requests, or account deletion:
Please include the email address associated with your account so we can locate it.
We may update this policy as the extension changes. The "last updated" date at the top of this page always reflects the current version. Material changes affecting how we handle your personal data will be announced through the extension or by email to registered users before they take effect. Continued use after a change takes effect constitutes acceptance of the revised policy.
We affirm that our collection and use of information complies with the Chrome Web Store Developer Program Policies, including the Limited Use requirements. Specifically: