Privacy Policy — Intra Enhanced [1337] (beta)

Effective date: January 1, 2026

This Privacy Policy explains what data the “Intra Enhanced [1337] (beta)” Chrome extension (“Extension”) processes, why it’s processed, and how it’s handled.

1) Summary

The Extension enhances the 42 Intra website by adding profile customization and productivity features. To work, it may authenticate you via 42 OAuth and call the 42 API and a companion backend service. The Extension stores settings and session tokens in your browser’s extension storage.

2) Data the Extension processes

Depending on which features you use, the Extension may process:

A. Authentication data (42 OAuth)

  • OAuth authorization code (temporary, used during login)
  • OAuth access token and refresh token (used to access the 42 API on your behalf)

B. 42 account/profile data (from the 42 API)

  • Your 42 login/username and basic profile data returned by the API (e.g., display name, avatar URL, campus/pool year when needed by features)

C. Preferences and local feature data (stored in extension storage)

  • Feature toggles / preferences (e.g., show ranking, show Quran widget, theme)
  • Pomodoro state and settings
  • Sticky note content (what you type into the sticky note)
  • Quran widget settings / cached verse data (if applicable)
  • Cached user/profile customization data used to render your chosen look faster

D. Network/technical data

Like most web requests, the services you contact (42 API, backend, Google Fonts) may receive standard request metadata such as your IP address and user-agent as part of normal internet communications.

3) How we use this data

We use the data only to provide the Extension’s functionality, for example:

  • Authenticate you and keep you signed in (tokens)
  • Fetch and display your 42 data needed for features (ranking, user info, etc.)
  • Load/store your preferences and local tools (Pomodoro, sticky notes, Quran widget)
  • Check whether an update is available

4) Where data is stored

Local storage (in your browser):

  • Tokens, preferences, and feature data are stored in chrome.storage.local on your device.
  • This data remains until you clear the Extension’s data or uninstall the Extension.

5) Data sharing / third-party services

The Extension shares data only with services needed to operate:

A. 42 Intra API

  • The Extension communicates with https://api.intra.42.fr/ for OAuth/token actions and for retrieving user data.
  • Your OAuth tokens are used to authorize these requests.

B. Companion backend

  • The Extension communicates with https://improved-1337.vercel.app/ for certain features (e.g., user data/preferences endpoints, ranking data, update checking).
  • Requests to this backend may include your 42 OAuth access token in the Authorization header and may include your 42 login in the URL query (e.g., ?login=...) depending on the endpoint.

C. Fonts and media resources

  • The Extension may load fonts from Google Fonts (https://fonts.googleapis.com) for styling.
  • The Extension may load images hosted on 42’s CDN (https://cdn.intra.42.fr) when displaying/using profile-related visuals.
  • These providers may receive basic request metadata (like IP address) when your browser downloads those resources.

6) What we do NOT do

  • We do not sell your personal data.
  • We do not run third-party ads in the Extension.
  • We do not download and execute remote JavaScript code (no remotely hosted code execution). The Extension’s code is packaged with the Extension; network requests are used for APIs/data/resources only.

7) Security

  • Network requests are made over HTTPS.
  • Tokens are stored in extension local storage on your device. No method of storage is perfect; avoid using the Extension on shared/untrusted machines.

8) Your choices and controls

You can control your data by:

  • Logging out (if provided in the UI) or clearing the Extension’s storage via Chrome’s extension settings / site data tools.
  • Uninstalling the Extension (removes locally stored Extension data).

9) Changes to this policy

If the Extension’s data practices change, this Privacy Policy will be updated and the effective date will be revised.

10) Contact

If you have questions about privacy, contact: jawad.pro17@gmail.com