Kod Formatlayıcı Privacy Policy

In short

Kod Formatlayıcı (Code Formatter) is a Chrome extension developed by Enar SEO. The extension does not send user data to the developer or to any server, does not collect it for storage, and does not share it with any third party. It contains no analytics, advertising, tracking or crash-reporting tools. All processing happens in the user's own browser.

The only exception is an action the user takes deliberately: when the user presses the Validate with W3C button, the page's HTML source is sent to W3C's validation service. Details are explained below.

What the extension accesses

The extension runs only when the user clicks its toolbar icon or uses the Alt+Shift+F shortcut. At that moment it:

Reads the source code of the open tab. This means the page's HTML (the DOM built by the browser), the contents of <script> and <style> elements embedded in the page, and the addresses of the files the page uses.
Reads the tab's address (URL) and title. This is used to match the result to the right page and to bring an already open viewer tab to the front.
Optionally downloads files. When the user clicks an external file (.js, .css, .json) in the sidebar or views the raw HTML returned by the server, the extension requests that file from the site's own server. The request uses the browser's existing cookies, so resources that require a session can also be viewed. The request never goes to the developer.

Show on page

When the user selects a line of code, the Show on page feature marks the corresponding element in the open tab with a blue outline. To do this, a temporary, visible highlight layer is added to the page and removed when the preview is closed. The element's path, text, link address and position are shown in the extension's own window. If the source tab is visible on screen (the tab is brought to the front if needed), a screenshot of that moment is taken. The highlight and screenshot are used only on the user's computer, only at that moment; they are not stored and are not sent anywhere. The page's content is not changed and form fields are not read.

Opening Google and Schema.org tools

When clicked, the Rich Results Test and Schema Markup Validator buttons in the structured data panel open the page's address in Google's (search.google.com) and Schema.org's (validator.schema.org) own tools in a new tab. This is no different from opening that address manually in the browser: the extension itself sends no data to these services; the only thing sent is the address opened by the user's click. The rest of the structured data check runs entirely locally.

W3C HTML validation

When clicked, the Validate with W3C button in the HTML validation view sends the selected HTML source to W3C's Nu Html Checker service (default: https://validator.w3.org/nu/) and shows the returned list of errors and warnings. This is the only case in which the extension sends page content to a third party. It happens only when the user presses this button, for that page; it never runs on its own. The data sent is subject to W3C's own privacy policy. By entering the address of a self-hosted Nu Checker server in the Server field of the same view, the user can avoid sending any data to W3C. The local pre-check in the same view runs entirely in the browser.

Where data is stored

The following is stored only on the user's own computer, in the browser's chrome.storage.local area:

Formatted output and page source, so the code doesn't have to be processed again when the same page is reopened.
Edits the user makes to the code inside the extension.
Analysis results (structured data findings, HTML size analysis, validation results).
Settings: indentation, font size, theme and, if set, a custom Nu Checker server address.

The 20 most recent pages are kept; older ones are deleted as new ones are added. This data:

Is never sent to any server.
Is never included in cross-device sync (storage.sync is not used).
Is deleted completely by the browser when the extension is uninstalled.

What is not collected

The extension does not collect personal information, location, authentication information, financial information, health information, personal communications or browsing history. Stored page addresses are only part of the local cache described above and never leave the device.

Remote code

The extension runs no remote code. All code is included in the installation package; no scripts are loaded from external sources, and eval or similar methods are not used.

Why the permissions are requested

Permission	Reason
`activeTab`	To read the source of that tab only, when the user clicks the icon
`scripting`	To run a read function in that tab at the user's request, and to draw a temporary highlight layer for “Show on page”
`storage`, `unlimitedStorage`	To store results, edits and settings locally; page sources are often several megabytes
`tabs`	To find the open viewer tab, read the address and title of the clicked tab, and bring the source tab to the front for “Show on page”
`<all_urls>`	The site the user will click on can't be known in advance; it is used only for the clicked page, the files the user selects, the screenshot, and the W3C validation the user starts

Changes

If this policy changes, the current version will be published at this address and the date above will be updated.

Contact

Kod Formatlayıcı is an Enar SEO product.

Enar SEO — https://www.enarseo.com/en/ — contact form: https://www.enarseo.com/en/contact/