Privacy Policy

Summary

Remote Browser Device lets a workspace you control operate this browser through end-to-end encrypted sessions. It does not sell data, show advertising, or track browsing. Data leaves the browser only to the Exchange server you configure, to operators you have authorized, and — only if you turn it on — as redacted error diagnostics.

Data stored on this device

The extension keeps the following in Chrome's extension-local storage. It is never synchronized through your Google account.

• Device credentials from pairing, the Exchange server address, and an Ed25519 identity key generated on this device.
• Workspace authorization certificates, revocation lists, and remembered approvals for operators.
• Your settings: language, clipboard, screensaver, background tasks and diagnostics preferences.
• Clipboard history, only when you or an administrator enable the clipboard feature (capped at 8 MiB).
• Encrypted audit records waiting to be uploaded to your workspace.

Logging out removes device credentials, identity keys and authorization state.

Data sent to your Exchange server

The extension connects to the Exchange server you choose (by default wss://exchange.ivjn.us, operated by Remote). It sends:

• Registration details: device ID, extension version, operating system and browser name/version.
• Health metrics: CPU and memory usage from Chrome's system APIs, and connection status.
• End-to-end encrypted session traffic and audit records. The server relays them but cannot decrypt them.
• Web Push notifications you write yourself on the configuration page.

Data shared with authorized operators

Only operators holding a certificate signed by your workspace root key can open a session. Within the limits of their grant and Chrome's site permissions you have given, they can read tab lists, page structure, screenshots, images and cookies, and act on pages. Full Chrome DevTools Protocol access requires a local confirmation in this browser unless you chose unattended approval. Password field values are never included in page observations.

Error diagnostics (optional, off by default)

If you enable “Send error diagnostics” on the configuration page, unexpected errors in the extension's own code are reported to Remote's error tracker at sentry.ivjn.us. A report contains the error type, file names and line/column positions within the extension, the extension version and the page name inside the extension (for example popup.html). Error messages, page content, URLs, cookies, clipboard data, keys, tokens and user identifiers are removed before sending. As with any network request, the receiving server sees your IP address. Turn the switch off at any time to stop reporting.

What we do not do

• No sale or transfer of user data to third parties.
• No use of data for advertising, credit-worthiness or lending.
• No use or transfer of data for purposes unrelated to the extension's single purpose: remote management of this browser by your own workspace.

The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Retention and control

Local data stays until you log out, clear it in the extension, or remove the extension. Data on a self-hosted Exchange server is governed by its operator. To request deletion of data held by the Remote-operated server, email admin@ivjn.us.

Contact

Questions or deletion requests: admin@ivjn.us.

摘要

Remote 浏览器设备扩展让由您掌控的工作区，通过端到端加密会话操作这个浏览器。扩展不出售数据、不投放广告、也不跟踪浏览记录。数据只会发往您配置的 Exchange 服务器和您授权的操作员；只有您主动开启时，才会额外发送经过脱敏的错误诊断。

保存在本机的数据

以下数据保存在 Chrome 的扩展本地存储中，不会通过 Google 账号同步。

• 配对得到的设备凭据、Exchange 服务器地址，以及在本机生成的 Ed25519 身份密钥。
• 工作区授权证书、吊销列表和对操作员的记住授权。
• 您的设置：语言、剪贴板、屏保、后台任务和诊断选项。
• 剪贴板历史：仅在您或管理员启用剪贴板功能后记录，上限 8 MiB。
• 待上传到工作区的加密审计记录。

退出登录会删除设备凭据、身份密钥和授权状态。

发送到 Exchange 服务器的数据

扩展会连接您选择的 Exchange 服务器（默认是 Remote 运营的 wss://exchange.ivjn.us），发送以下内容：

• 注册信息：设备 ID、扩展版本、操作系统和浏览器名称/版本。
• 健康指标：通过 Chrome 系统接口读取的 CPU、内存使用率，以及连接状态。
• 端到端加密的会话流量和审计记录：服务器只负责转发，无法解密。
• 您在配置页亲自填写的 Web Push 通知。

与授权操作员共享的数据

只有持有您工作区根密钥签发证书的操作员才能建立会话。在授权范围和您授予的 Chrome 站点权限之内，操作员可以读取标签页列表、页面结构、截图、图片和 Cookie，并操作页面。完整 Chrome DevTools Protocol（CDP）访问需要在本浏览器里逐次确认，除非您选择了无人值守授权。页面观察结果永远不包含密码框的值。

错误诊断（可选，默认关闭）

如果您在配置页开启「发送错误诊断」，扩展自身代码中的意外错误会上报到 Remote 的错误追踪服务 sentry.ivjn.us。每条报告只包含错误类型、扩展内的文件名和行列位置、扩展版本，以及出错的扩展页面名称（例如 popup.html）。错误消息、网页内容、网址、Cookie、剪贴板数据、密钥、令牌和用户标识都会在发送前删除。和任何网络请求一样，接收服务器能看到您的 IP 地址。随时关闭开关即可停止上报。

我们不会做的事

• 不向第三方出售或转让用户数据。
• 不将数据用于广告、信用评估或借贷目的。
• 不将数据用于与扩展单一用途无关的目的。扩展的单一用途是：让您自己的工作区远程管理这个浏览器。

保留与控制

本地数据会一直保留，直到您退出登录、在扩展中清除，或卸载扩展。自建 Exchange 服务器上的数据由其运营方负责。如需删除 Remote 运营服务器上的数据，请发邮件至 admin@ivjn.us。

联系方式

如有问题或需要删除数据，请发邮件至 admin@ivjn.us。