Skip to content

Instantly share code, notes, and snippets.

@pablomoretti

pablomoretti/PRIVACY.md

Created September 8, 2026 16:44
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save pablomoretti/7457ae8f880c90573c433faf0cee6b02 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save pablomoretti/7457ae8f880c90573c433faf0cee6b02 to your computer and use it in GitHub Desktop.
Download ZIP
Privacy policy — Fury Token Injector
Raw
PRIVACY.md

Privacy Policy — Fury Token Injector

Last updated: 2026-09-08

Fury Token Injector is an internal Chrome extension for authorized Mercado Libre users. Its only purpose is to obtain the Fury authentication token from the user's active SSO/MFA session and add the X-Tiger-Token header to requests addressed to *.furyapps.io.

Data handling

  • The extension does not collect, sell, or transfer personal information, browsing history, website content, or authentication credentials to the developer or any third party.
  • The token is kept only in Chrome's session storage and is removed when the browser session ends.
  • The token is used locally to authorize requests to the restricted Fury hosts described above. It is not sent to any analytics, advertising, or external service.
  • The extension does not use remote code. All executable code is included in the published package.

Permissions

The tabs, storage, alarms, scripting, and Declarative Net Request permissions are used only to complete the Fury login flow, keep the session token in memory, and add the authentication header for the restricted Fury hosts. Host access is limited to web.furycloud.io and *.furyapps.io.

Contact

For questions or to report a security issue, contact the extension owner through the Mercado Libre Segnif/security support channel.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment