Privacy policy
Send To Manyfold is an unofficial browser extension, for Chrome and Firefox, that sends 3D models from Printables, Thingiverse and MakerWorld to your own Manyfold server. It is not affiliated with, made by or endorsed by Manyfold, Printables, Thingiverse or MakerWorld. It is open source (MIT) at github.com/jackalopes/send-to-manyfold.
In short: the extension has no server of its own. The developer receives no data from it. Everything it sends goes to the model site you are using or to your own Manyfold server.
What the extension accesses
- The model page you are on, on
printables.com,thingiverse.comandmakerworld.com. When you open the popup, it reads the page's title, description, creator name, license, tags, images and file list, so you can review them before sending. On any other page, it reads nothing. - The address (URL) of that model page, to check whether it is already in your Manyfold (see below).
- Your settings: your Manyfold address, your Manyfold access token and your prefill options.
The extension never reads or copies your login tokens or cookies for the model sites. When it asks a site for a download link, the browser attaches your own session to that request, as it does when you click download yourself.
What is sent, and where
- To the model site you are on (and its download and image hosts): the requests needed to get the model's details and download links, using your own logged-in session in the page. The files are then downloaded without your cookies.
- To your own Manyfold server, only the address you typed in the options page:
- Automatically, on a model page: a read-only search for the page's URL, to show a check mark ("In Manyfold") when the model is already saved. This is the only automatic request. It sends the URL of the model page you are viewing to your server.
- When you press Send: the model's files, title, description, creator, license, tags, source link and images that you reviewed, and the folder or collection you chose.
- When you press "Test connection": a request that checks the address and token.
- Your Manyfold access token is sent only to your Manyfold server, in the
Authorizationheader. It is never sent to the model sites, to the developer or to anyone else.
Plain http:// addresses are allowed, because self-hosted servers on home networks often have no TLS certificate. An http:// address sends your token and data unencrypted across your network. The options page warns when an http:// address points at a public host. Use https:// whenever your server has it.
What is stored on your computer
- Your Manyfold address, your token and your settings, in the browser's local extension storage (
chrome.storage.local; Firefox uses the same name). - A local history of what you sent (to warn about duplicates), also in
chrome.storage.local. - Temporary per-tab send progress, in
chrome.storage.session, which the browser clears when it closes.
None of this is synced or sent to the developer.
What the extension does not do
- No analytics, tracking, advertising or telemetry.
- No third-party servers. Your data is not sold or transferred to third parties, and not used for anything other than sending models to your Manyfold server.
- No use of data to decide creditworthiness or for lending.
- No remote code. All code is in the extension package.
Limited Use
Send To Manyfold's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is used only to provide the extension's single purpose, sending a model you choose to your own Manyfold server. It is not transferred to others, not used for advertising, not used to determine creditworthiness, and no human reads it.
Permissions
The extension asks the browser for access to your Manyfold address at the moment you save it, and to no other address. In Chrome that is the exact address you typed; in Firefox it is that host on any port. You can remove this access at any time at chrome://extensions in Chrome or about:addons in Firefox. In Firefox you can also revoke the access to the model sites' download hosts there.
Removing your data
Uninstalling the extension deletes everything it stored. To keep the extension but remove the data, clear the token and address in the options page, or clear the extension's storage in your browser. Models already sent are in your Manyfold server, which you control. Delete them there. You should also delete or revoke the access token in Manyfold if you no longer want the extension to use it.
Changes
If this policy changes, the new version will be posted here with a new date. The history is in the project's repository.
Contact
Questions or concerns: open an issue at github.com/jackalopes/send-to-manyfold/issues.