Privacy Policy

In short: XSLT Fix collects no data. It transforms and displays XML inside your browser, and your settings never leave your device. The developer receives only feedback you choose to send.

What the extension does

XSLT Fix is a Chrome extension. It displays XML documents that link an XSLT stylesheet with <?xml-stylesheet type="text/xsl"?>, such as XML sitemaps and RSS feeds, by applying that stylesheet inside your browser, and shows other XML documents in a built-in XML viewer. On websites you choose, it also restores XSLTProcessor for web apps that use it. It includes XSLT Tester, an editor for stylesheets, and a viewer for XML files you open from your computer. It replaces the XSLT support that Chrome removed.

Data we collect

None. XSLT Fix contains no analytics, advertising, crash reporting or tracking code, has no user accounts, and does not sell or share data with anyone. The extension itself sends nothing to the developer.

How pages are processed

• On every web page you open, two small scripts run. One checks whether the page is an XML document (or XML sent as plain text). The other only listens for an error saying that XSLTProcessor is missing; it reads no page content. On any other page they change nothing.
• On an XML page that links an XSLT stylesheet, the extension reads the page and the stylesheet and transforms them with its built-in XSLT engine, which runs in a hidden page belonging to the extension. It happens on your device, and the result is shown in the same tab.
• On other XML pages, or when a page cannot be styled, the extension shows the XML in its XML viewer in the same tab. Searching, XPath, the table view and exports to Excel, CSV or JSON all happen on your device; exported files are saved only where you choose.
• On websites where you turn on "XSLT for web apps", the extension adds its XSLT engine to those sites' pages so their own scripts can use XSLTProcessor. It does not read or change those pages otherwise.
• Local XML files open directly in Chrome only if you turn on "Allow access to file URLs" for the extension. A local file can only use stylesheets in its own folder or below, and files are read on your device only.
• Files, folders and .zip archives you open, drop or paste into the extension's file viewer, and the XML and XSLT you type into XSLT Tester, stay in that page. They are not uploaded or saved, and are gone when you close it.

Network requests

The extension contacts only the website you are viewing, and only on XML pages or when you ask it to, to load:

• the XML page itself again, usually from your browser's cache, because the transform needs the original file;
• the XSLT stylesheet the page links, plus any files that stylesheet imports or includes, or reads with document();
• in the sitemap view, when you press the button to load them, the sitemaps a sitemap index lists;
• in the sitemap view, when you press the button to check them, each listed URL, to read its status code, redirect, robots meta tag and canonical link. Only the start of each page is read, and these requests carry no cookies;
• when you press "Sitemaps of this site" in the extension's menu, that site's robots.txt, and its /sitemap.xml if robots.txt lists none;
• when you choose "Open link in the XML viewer" or "Open link in XSLT Tester" in the right-click menu, the address of that link.

Stylesheet files must come from the same website as the XML page; requests to other sites are refused, as with Chrome's own XSLT. On a website, the sitemap view also loads and checks only addresses on that same website. A sitemap opened from the extension's menu opens in the file viewer, which loads the sitemaps and URLs it lists from wherever they are. In XSLT Tester, the extension also loads an address only when you type it into the XSLT Tester's URL box and press Load. The requests are made as your browser normally would, so the website sees them like any other page load, including your cookies for that site. The extension downloads no code and contacts no other server. The feedback and uninstall pages described below are ordinary web pages on serpfact.com that the extension opens in a tab.

Data stored on your device

• Settings: whether the extension and the XML viewer are on, the website addresses (host names) where you turned it off, and those where you turned on XSLT for web apps. They are kept in the extension's local storage, are not synced, and are deleted when you remove the extension.
• Tab status: for tabs where the extension acted, the page address, the result (for example "styled" or the reason it could not be styled), the stylesheet address and any messages it printed, so the popup and toolbar badge can show them. When you open a page in XSLT Tester, or choose "View selected XML" in the right-click menu, the XML is handed over the same way and removed as soon as it is read. This is kept in memory only and is discarded when the tab closes, the page changes or the browser exits.
• A counter of how many pages were styled, used only to show a one-time, dismissible invitation to rate the extension. It contains no addresses.

Permissions

• Access to websites (http and https, only on the sites you allow after install, and local files if you allow them): to check page types, transform and display XML pages, load addresses you enter in XSLT Tester, and restore XSLTProcessor on sites you choose.
• scripting: to load the XML viewer and XSLT helpers into XML pages, and the XSLT engine onto the sites where you turned on XSLT for web apps.
• storage: for the settings and tab status described above.
• activeTab: when you click the toolbar icon on a site XSLT Fix may not access yet, it lets the popup see that tab's address, so it can offer to allow the site. Nothing on the page is read until you allow it.
• contextMenus: for the right-click entries that open a link in the XML viewer or XSLT Tester, or show selected text as XML. Nothing is read until you choose one.
• offscreen: for the hidden extension page where every XSLT transform runs, so a stylesheet that runs too long can be stopped without freezing a tab, and which reads local XML files for the viewer.

Feedback and uninstall pages

• The Feedback link in the popup opens a form on this website. The extension version, Chrome version, interface language, the popup's page status (for example "styled") and the address of the current page are placed after the # in the link, a part of the address browsers never send to a server. The form shows them, and sends the page address only if you tick "Include the page address".
• When you remove the extension, Chrome opens a short form here asking why. It works the same way and sends nothing unless you press Send.
• When you send a form, we store what it shows: your message, the reason or type you picked, an email address if you give one, the version, Chrome version and language, the page status, the page address if you ticked it, and the country your request came from as reported by our network provider. Your IP address is not stored; it is used only briefly in memory to limit abuse.
• These web pages set no cookies and contain no analytics or tracking code.
• This is used only to fix problems and improve XSLT Fix, and to reply if you left an email address. It is not shared or sold. To have something you sent deleted, send another message through the form saying so, from the same email address if you gave one.

Changes

If this policy changes, the new version will be published at this address with a new date.

Contact

Questions about this policy can be sent through the feedback form or the Support tab of XSLT Fix in the Chrome Web Store.