Mr. Rao Plus · privacy policy · Italiano
What Mr. Rao Plus does with your data
Nothing leaves your device. Below is the detail, and next to every claim the way to check it yourself, without taking this page's word for it.
What it reads
| what | when | where it ends up |
|---|---|---|
| The body of the requests the covered chat sites send | on every submission | in memory, for the duration of the check |
| The text attachments you upload there | on every submission | same |
| Your settings and your licence key | at start-up | your browser's chrome.storage.sync |
| The date you installed the extension | once only, at install time | same |
Conversation content is never stored anywhere: not on
disk, not in chrome.storage, not in a log. It lives for as
long as it takes to look at it, and then it is gone.
The installation date is a number and the version you arrived with, nothing else. It stays in your browser like everything else: nobody receives it, and it is written once only — an update does not touch it.
Not even the blocking dialog shows the data in full: the sample is masked
by the engine — Ma•••••••••chi, not the name — because it is
there to help you find the item in your message, not to let someone read
it over the shoulder of whoever is sharing their screen in a meeting.
What it sends out
Nothing. No network calls, ever: not to check the licence, not to count installations, not to report errors.
How you check it yourself
| claim | how to verify it |
|---|---|
| It sends nothing to anyone | The manifest contains no host_permissions. Read it: chrome://extensions → Details, or open manifest.json in the package folder |
| It sends nothing to anyone (again) | Open developer tools on one of the covered chats, Network tab, and watch while you type |
| Conversations never reach the disk | chrome://extensions → Details → “Inspect views: service worker” → console → chrome.storage.sync.get(null). You will find three things and nothing else: the settings, the licence and the installation date |
| You do not need a licence to be protected | Ed25519 appears only in opzioni.js. It is absent from the two bundles that run on the chats — principale.js and isolato.js — so no licence can switch the protection off |
| And when one is needed, it will not phone home | It is a signature verified with an embedded public key. Search opzioni.js for fetch or http://: they are not there. The bundles are deliberately not minified |
| The check really happens | Type a made-up IBAN that passes mod-97 into a chat and try to send it |
The permissions it asks for, and why
storage— to remember your settings, the licence and the installation date. Nothing else.- The sites listed in
content_scripts— so it can look at what you send to them. There is no<all_urls>: on every other site the extension does not exist.
It does not ask for tabs, it does not ask for webRequest, it does not ask for your history.
Who is who
Whoever uses Mr. Rao Plus remains the controller or processor of the data they handle. The author of the product receives nothing, sees nothing and keeps nothing, and therefore takes on no role under Regulation (EU) 2016/679.
Contact
Questions about this policy, or about anything written in it: [email protected] or LinkedIn.