Timffle Chrome Extension Privacy Policy

Timffle ("the extension", Chrome extension ID eandddnbchclalbjkhfelhjhpijifcog) lets Chrome play Flash (SWF) content on web pages. This policy explains how the extension handles your data. The source code is public on GitHub.

We do not collect your data

• The extension has no accounts and needs no sign-in.
• It contains no analytics, crash reporting, ad network or tracking code.
• The developer runs no server that receives data from the extension. The extension does not send your browsing history, page content, input, device identifiers or any personal data to the developer or anyone else.

What the extension does on your computer

• It looks for Flash content on the pages you open and plays it on your computer with the emulator built into the extension (WebAssembly). SWF files are downloaded by the browser from the site that hosts them, like any other part of the page.
• When you open a .swf address directly, it plays the file in the extension's player page.
• So that Flash on 4399's websites can load, it adds one cross-origin (CORS) header to responses for SWF files requested by 4399's own pages.

Data that stays on your computer

• Settings (player options, whether and how socket connections are made, the lists of sites allowed or denied to use socket connections) are kept in Chrome's extension storage. If you turned on Chrome sync, Chrome syncs them to your other computers through your Google account; that is a Chrome feature and the developer cannot see this data.
• Game progress: data that games save through Flash (Flash local shared objects) is kept by the browser in that website's local storage, like other site data.

TCP (socket) connections for games

Some online Flash games need TCP connections, which a web page cannot open by itself, so the extension connects for the game through the "Timffle connection helper", a program you install yourself on your computer:

• The first time a site asks for a connection, the extension asks you. You can allow or deny just this time, or choose "always allow" / "always deny". Taomee Taiwan's four game sites (mole, seer, hua and ddt.61.com.tw) are allowed by default; you can change that in the options page.
• Once allowed, your computer connects directly to the game server, not through any server of the developer. What is sent is decided by the game and its server; the extension and the helper do not store it, analyse it or pass it to anyone.
• The helper connects only to public internet addresses and opens no port for others to connect in. The one exception: a website whose address is itself a local-network IP may connect back to that same address.
• If you set your own WebSocket proxy in the options page instead, connections go through the server you chose.

Downloading the helper

When you press "Download the installer", Chrome downloads it from GitHub (the releases of Im-Tim-mI/Timffle-Helper); GitHub receives that download request and handles it under GitHub's privacy statement.

Logitech discount-code box

In the English and Chinese interface, the options page and the popup show a discount code for Logitech's official online store. The picture is part of the extension and is not loaded from the internet; only when you click the link does Chrome open Logitech's website, which then follows Logitech's privacy policy. The extension does not record whether you click. When you buy with this code, Timffle's author earns a commission; Timffle is not made or endorsed by Logitech.

What the permissions are for

• Read and change your data on all websites: Flash content can be on any website, and the extension has to find it in the page to play it.
• storage: keeps your settings.
• scripting: puts the player into web pages.
• declarativeNetRequestWithHostAccess: plays directly opened .swf files in the player page, and the 4399 compatibility rule above.
• nativeMessaging: talks to the connection helper you installed yourself.

Deleting your data

• Change or clear the site lists in the options page;
• remove the extension in chrome://extensions, which deletes the settings it stored;
• clear data games saved on websites with Chrome's "Delete browsing data".

Children

The extension is not designed for children under 13; the extension itself collects no data from anyone.

Changes to this policy

If this policy changes, this page and the "Last updated" date above will be updated.

Contact

Questions: [email protected]