TDGR Bandai Connect — Privacy Policy

Single purpose: Connect your Bandai TCG+ account to your own account on The Direct G Relay (tdgr.org) by securely transferring your
Bandai session token, and keep that token current.

What it accesses: On bandai-tcg-plus.com it reads ONE value from local storage — your Bandai session token (userToken). It reads nothing
else and never has your Bandai username or password. On tdgr.org it receives a one-time link key from your TDGR Settings page so it
knows which account to connect.

What it does: Sends your Bandai session token to your own TDGR account (tdgr.org), authenticated by your link key. TDGR uses it solely
to fetch your own tournament data. The token is re-sent only when it changes.

What it stores: In the browser — your TDGR link key and a small status (last-sync time). The Bandai token is NOT persisted by the
extension; it is held in memory only long enough to forward it. On TDGR servers the token is stored encrypted and used only for your own
data.

What it does NOT do: No browsing history, keystrokes, passwords, or data from any other site. No selling or sharing data. No
advertising, tracking, or analytics.

Your control: Click "Regenerate key" in TDGR Settings to instantly revoke the extension, or remove the extension. "Disconnect" in TDGR
Settings deletes the stored token.

Full policy: https://tdgr.org/extension/privacy Source: https://github.com/Blooboom/tdgr/tree/main/extension

Notes to Reviewer (paste — this answers the source/build requirement and tells them how to test):
Source & build: This add-on is plain, unminified JavaScript/HTML/JSON — there is no build step, bundler, transpiler, or minification.
The submitted package IS the source. Full source: https://github.com/Blooboom/tdgr/tree/main/extension

What it does: Reads only the Bandai session token (localStorage 'userToken') on bandai-tcg-plus.com and sends it to the user's own
account on tdgr.org so their tournament data can be synced. Re-sends only on change. No passwords, no other sites, no tracking.

How to test (requires a Bandai TCG+ login and a TDGR login):
1. Install the add-on.
2. Go to https://tdgr.org/settings (sign in with Discord) → "Bandai TCG+ Account → Browser extension" → click "Link extension" (the page
shows "Installed").
3. Open https://www.bandai-tcg-plus.com while logged in → the extension popup shows "Token synced".
Happy to provide a test TDGR account on request.