Information handled on your device
ClashFlow can store proxy profile names, protocols, hosts, ports and colors; bypass lists, domain-routing rules, PAC scripts and PAC URLs; optional proxy usernames and passwords; and interface preferences, connection mode and consent state.
This information is stored in chrome.storage.local inside the user's Chrome profile. It is not sent to the developer.
Exports
When the user exports a backup, Chrome saves it to a user-selected location. Backups remove usernames and passwords by default. Credentials are included only after the user explicitly enables “Include usernames and passwords.”
Proxy authentication
When the active proxy requests authentication, Chrome provides ClashFlow with an authentication event that may include the current request URL and proxy challenge. ClashFlow verifies that the challenge is for a proxy and can respond with the active profile's credentials.
The event is used only in memory to complete authentication. ClashFlow does not store, log, analyze or transmit the request URL or browsing history. Optional access to all sites is requested only when the user configures a proxy username.
PAC URLs and proxy providers
If the user configures a PAC URL, Chrome may contact that URL to retrieve the PAC file. If a proxy is activated, browsing traffic is sent to the proxy server chosen by the user. Those third-party services have their own privacy practices. ClashFlow does not provide, endorse, monitor or control them.
No sale or secondary use
ClashFlow does not transmit data to the developer or third parties, sell data, use data for advertising, use data for creditworthiness or lending, or use data for purposes unrelated to managing Chrome proxy settings.
Retention and deletion
Local information remains until the user edits it, selects “Clear every profile and setting,” clears extension data or uninstalls ClashFlow. The developer has no server copy to retrieve or delete.
Security
Credentials are stored using Chrome's local extension storage and are not end-to-end encrypted by ClashFlow. Anyone with access to an unlocked Chrome profile or an unredacted backup may be able to access them. Protect your device and do not share credential-bearing backups.
Children's privacy
ClashFlow is a general-purpose configuration utility and is not directed to children. It does not knowingly collect personal information from children.
Changes
Material changes will be posted here and reflected in extension release notes with a revised effective date.
Contact
Privacy questions can be sent to [email protected].