Privacy Policy

Overview

Adobe Bulk Download is a Chrome extension that helps you download your own files from Adobe Creative Cloud in bulk. This policy explains what data the extension accesses, how it is stored, and what it does not do.

Data Accessed

The extension accesses only your own Adobe Creative Cloud files through official Adobe APIs. It does not access files belonging to other users, and it does not access any data outside the Adobe ecosystem.

• Adobe authentication token — read from window.adobeIMS on Adobe pages you are already signed in to. This token is the same session credential your browser already holds; the extension simply relays it to its background service worker so it can call Adobe APIs on your behalf.
• File metadata — folder listings and asset metadata returned by Adobe's cloud-storage and conversion APIs (*.adobe.io).
• File content — the actual bytes of your files, downloaded for saving to your local disk.

Authentication Token Handling

• The token is stored exclusively in chrome.storage.session, which is an in-memory store that is automatically cleared when the browser is closed.
• The token is never written to disk, never sent to any server other than *.adobe.io / *.adobe.com, and never exfiltrated.
• The token is validated (JWT format check) before being accepted.

Local Storage

Network Requests

The extension makes network requests to the following domains:

• https://*.adobe.io — Adobe cloud storage and file conversion APIs
• https://*.adobe.com — Adobe authentication and asset services
• https://abd-license-api.the-pharmer.workers.dev — License verification for paid users and the usage-analytics proxy (see Licensing and Usage Analytics below)

The extension does not contact Google Analytics directly. Usage analytics go to the developer's Cloudflare Worker listed above, which forwards them to Google Analytics 4. The only other network requests occur when you voluntarily submit feedback (see Feedback & Surveys below).

Permissions Used

Host Permissions

The extension requests access to https://*.adobe.io/* and https://*.adobe.com/*. These are required to:

• Call Adobe's cloud storage APIs to list and download your files.
• Extract your existing authentication token from Adobe pages you are signed in to.

Content scripts run only on https://assets.adobe.com/* and https://acrobat.adobe.com/* to detect your login session.

Usage Analytics

The extension sends a small set of usage events so the developer can see whether the install, scan, download and payment flows are working. These events are pseudonymous: they are tied to a randomly generated install ID and a session number, not to your name, email, or Adobe account.

• Events sent — install, scan started, scan completed, download started, download completed, free limit reached, payment link opened, payment completed, license activated.
• What each event contains — the event name, the extension version, the install ID, a session number, and small numeric counts (for example, how many files were scanned or downloaded). No file names, file paths, file contents, folder structures, or Adobe identifiers are ever included.
• Where it goes — to the developer's own proxy server (the Cloudflare Worker listed above), which forwards it to Google Analytics 4. This data is not used for advertising, is not sold, and no profiling is performed.
• Legal basis — legitimate interests (Article 6(1)(f) GDPR): understanding whether the product's core flows work. This policy, linked from the extension's listing and settings, is the disclosure for this processing.

Licensing & Payment

Adobe Bulk Download offers a free tier (50 files per session) and a paid lifetime license ($19 one-time purchase via Stripe).

• Install ID — a randomly generated UUID stored in chrome.storage.sync. It contains no personal information by itself and is used to associate your license with your browser. It is sent to our license verification server and to Stripe as a checkout reference.
• License verification — when checking license status, the extension sends your install ID, your Google account ID (when available), and your email address (when known) to our Cloudflare Worker (abd-license-api.the-pharmer.workers.dev). As with any web request, your IP address is visible to the server. This data is processed for license verification, support lookups, abuse and fraud detection, and debugging. Legal basis (GDPR): legitimate interests, Article 6(1)(f), in line with Recitals 47 and 49 (fraud prevention and network security). Server logs at Cloudflare are deleted automatically after 7 days. Google Analytics 4 is a recipient of the pseudonymous usage events described above; no other third party receives this data.
• Payment processing — payments are handled entirely by Stripe. We do not receive, process, or store your credit card number, billing address, or other payment details. Stripe notifies our server only that a payment succeeded, along with the install ID.

Feedback & Surveys

The extension provides two optional ways to share feedback. Both are entirely voluntary — no data is collected unless you choose to submit.

• Send Feedback form — opens a Google Form in a new tab. Your extension version, Chrome version, platform, and license status are pre-filled in the URL to help us diagnose issues. Your responses are stored in Google Sheets. If you provide your email address, it is used only to follow up on your feedback.
• Uninstall survey — if you uninstall the extension, a short survey page opens on saltydalton.com. It asks for the reason you uninstalled and an optional email. Your extension version, random install ID, and license status are included in the submission. Responses are sent to Google Apps Script and stored in Google Sheets.

Feedback data is used only to improve the extension. It is never sold, shared with advertisers, or used for any purpose other than product improvement and responding to your inquiry.

What This Extension Does NOT Do

• Does not read or transmit your browsing history
• Does not use cookies
• Does not send file names or file contents anywhere except to your own computer
• Does not sell or share your data with advertisers or data brokers
• Does not access any non-Adobe websites
• Does not modify any files in your Adobe Creative Cloud account
• Does not store your password (the token comes from your existing browser session)

User Control

You can revoke all data and permissions at any time by uninstalling the extension. All session data is cleared automatically when you close your browser. Preferences stored in chrome.storage.sync are removed upon uninstall.

Changes to This Policy

If this privacy policy is updated, the "Last updated" date at the top of this page will be changed. Significant changes will be noted in the extension's changelog.

Contact

If you have questions about this privacy policy, use the "Send Feedback" link in the extension or visit saltydalton.com/abd. You can also email support@saltydalton.com. Data received through Chrome APIs is used in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements.