Privacy policy
Last updated: July 2026
Personal data (passenger details)
To auto-fill the passenger fields on the official booking site, the extension offers a "passenger details" feature (ID/passport number, phone, email). It is optional and designed security-first:
- Default "this session only": kept in browser memory (
chrome.storage.session) — never written to disk, and cleared when you close the browser. - Optional "remember (encrypted)": encrypted with a password you set via PBKDF2-SHA256 + AES-GCM and stored locally as ciphertext only; neither the plaintext nor the password is stored, and you unlock it with your password each time you open the browser.
- Saved passenger details are never shown back in the settings screen — you can only re-enter or delete them.
- This data is never uploaded; it is used solely to fill in your own fields on the official booking page.
Where your settings live
Your booking preferences (line, date, ticket counts, interface language, reminders and so on) are stored only in your own browser's local storage (chrome.storage.local). This data never leaves your device and is deleted when you remove the extension.
Permissions
| Permission | Why |
|---|---|
| storage | Save your booking preferences and passenger details locally (never sent out) |
| alarms, notifications | Local alarm and notification for on-sale / payment-deadline reminders — no server involved |
| afrts.forest.gov.tw | Run form-filling only on the official booking site; also switches to an already-open booking tab |
The extension runs only on afrts.forest.gov.tw booking pages, never on any other website.
Captchas
This extension contains no captcha recognition or bypass code whatsoever. Captchas are always typed by you. The extension only enlarges the image and moves your cursor to the input box.
Partner links and completion-page promos
After a successful booking the extension shows travel partner links (accommodation, tours), clearly labelled. They are followed only when you click them, never redirect automatically, and never overwrite existing affiliate parameters. If you book through them this site may earn a small commission, at no extra cost to you. You can dismiss the panel or disable the whole extension with the master switch.
The completion page's recommendations may be supplied by our own website (a one-way download of the text and images to display). This sends none of your data and contacts no third party; when it is not enabled the completion page uses built-in content and makes no external connection at all.
Data sharing
The extension never uploads any of your personal data and is technically incapable of sending it out, so there is no personal data to share, sell or transfer to anyone.
Changes
If this policy changes, the date above will be updated.
Contact
Questions? Use the feedback link in the footer.