Privacy Policy

Last updated:

R2 Dashboard is a Chrome extension for managing Cloudflare R2 storage. We respect your privacy and design the product to use minimal permissions and local storage wherever possible.

Data we process

• Authentication information you provide: Cloudflare API token and/or R2 access key/secret to connect your own accounts.
• Configuration and cache: account list, language preference, sync interval, buckets/objects summaries, and snapshots.

How we process data

• Local storage: We store data in chrome.storage.local on your device. This includes credentials, which are only used to call Cloudflare API/R2 endpoints on your behalf.
• No sale or sharing: We do not sell, rent, or share your data with third parties beyond the Cloudflare services you choose to connect to.
• Purpose limitation: Data is used only to provide the extension’s single purpose: managing your R2 storage.
• No content scripts: We do not read website content or web history.

Security

• On-device operations: Request signing and presigned URL generation happen locally in the extension’s service worker.
• Encryption helpers: The project includes helpers for hashing and AES (see utils/crypto.js); however, your security also depends on how you use and store your credentials.
• Network scope: Requests are made only to api.cloudflare.com and *.r2.cloudflarestorage.com as needed to perform your actions.

Retention and deletion

All data is stored locally and can be cleared at any time from the extension options or by clearing the browser’s extension storage.

Children’s privacy

R2 Dashboard is not intended for children under 13 and does not knowingly collect information from children.

Changes

We may update this policy as the product evolves. Material changes will be reflected on this page with an updated “Last updated” date.

Contact

Questions? Contact us at [email protected].