1. Overview & Product Scope

This Privacy Policy applies only to the browser extension Fiktu Image Search (Chinese listing name: Fiktu以图搜图(搜图,搜同款), Chrome Web Store item ID kldidhobbmmjeaeaiilomailbhjlcfpc) (the “Extension”). It does not replace the separate policy for Fiktu Image Toolbox (batch image download).

The Extension’s single purpose is reverse image search: after you choose an image, the Extension helps you search for visually similar images or products on a search engine or e-commerce site that you select.

This page comprehensively discloses collection, processing, storage, and sharing of user data. None of these four topics is omitted.

2. Prominent Disclosure (What Happens When You Search)

3. Data Collection (What Information We Collect)

The Extension collects or handles only data needed for reverse image search, related settings, optional price watch, and aggregated product reliability. Collection happens in these categories:

3.1 Search images you provide (user-initiated)

• User Content Image bytes / data URI / file: a photo, product image, or screenshot that you upload, paste, pick from the current page, or capture with “Screenshot Search”.
• When collected: only after an explicit action (toolbar popup, hover search button, right-click screenshot search, or the search page).
• May include personal data: if the picture itself shows a person, ID, address, or other private scene, that content is inside the image. The Extension does not run face recognition or extract identity fields from the image. The destination search engine will receive the same pixels you chose to search.

3.2 Page image URLs on the tab you open (local scan)

• Website Content Image source URLs on the active tab when you open the popup “Page Images” tab, or the src of an image you hover when the on-page search button is enabled.
• Purpose: show thumbnails in the popup or start a search for that image. URLs stay on your device unless you start a search.

3.3 Search session and settings (local)

• Default destination site, language, compression quality, history size, whether the hover button is shown.
• A short-lived per-tab search session (image data URI + chosen site) in chrome.storage.session so the destination page can finish the search.
• Recent search history: SHA-256 image id, timestamp, full-size data URI, and a small JPEG thumbnail, in chrome.storage.local.

3.4 Anonymous usage analytics

• User Activity Event name (for example simg_trigger, simg_execute, search_img_pageview), extension id/name/version, random clientId, session id, browser language, optional source_domain (hostname only of the page where you invoked search), and target platform id (for example 1688, google).
• Not included: full page URL, the search image pixels, your name, email, or account password. This Extension does not provide a Fiktu login.

3.5 Optional comparison / price-watch data (only if you use those controls)

• For in-extension Alibaba Lens or Taobao comparison views: the same search image (base64) plus UI language.
• If you add a price watch: product URL, title, image URL, price, currency, and platform id, stored locally. Later price refresh may send a product id / offer id to Fiktu’s product-detail API.
• If you click an Alibaba result that uses a promotion link: the product URL is sent to Fiktu to resolve an affiliate / promotion URL.

3.6 Configuration fetched from Fiktu (not personal data)

• A public list of e-commerce site names, icons, homepages, and optional image-search entry URLs from https://www.fatkun.net/api/trpc/ecsites.getAll, cached locally for 24 hours. This request does not include your search images or identity.

4. Data Processing and Use (How We Process Your Data)

All processing is limited to the Extension’s single purpose: reverse image search and closely related user-facing features (crop, history, downloads of result images you choose, optional comparison and price watch).

• Local preparation: convert/compress the image (for example JPEG, resized before upload), crop if you confirm a crop, compute SHA-256 for history deduplication, and keep a thumbnail.
• Launch search: open or navigate a tab to the site you selected; a content script then submits the image through that site’s own image-search control (file input or that site’s upload API), as if you uploaded it there yourself.
• 1688 Cross / soutu proxy: for the 1688-cross path, a compressed image may be POSTed to https://fanli.fatkun.net/api/image-search/1688/uploadImage to obtain an imageId, then the results page is opened.
• Alibaba Lens: POST image base64 and UI language to https://open-s.alibaba.com/openservice/lensImageSearchViewService.
• Taobao comparison API: POST image base64 to Fiktu https://www.fatkun.net/api/trpc (platform.taobaoSearchByPic), which queries Taobao on your behalf and returns product cards.
• Made-in-China: POST the image file to https://file.made-in-china.com/img-search/upload, then open the returned search URL.
• Analytics: send the event fields in §3.4 to Google Analytics 4 Measurement Protocol to measure feature reliability (for example whether a site’s search injection succeeded).
• Downloads: if you download result images, Chrome’s downloads API saves files to your disk. Fiktu does not receive those files.

5. Data Storage, Security, and Retention

5.1 Where data is stored

• Your device: settings, history images/thumbnails, random analytics client id, e-commerce site cache, and price-watch lists use chrome.storage.local (history may use unlimitedStorage because data URIs are large). Active search sessions use chrome.storage.session and memory.
• In transit: HTTPS/TLS to Fiktu hosts, Google Analytics, Alibaba Lens, Made-in-China upload, and the destination sites you open.
• Fiktu servers: transient handling of image base64 for 1688-cross upload and Taobao-by-image proxy; product id for optional price refresh; product URL for optional Alibaba promotion-link resolve. Fiktu does not operate a permanent public gallery of your search photos.
• Third-party search engines: after upload, retention is governed solely by that company’s own privacy policy. We cannot delete copies already stored by Google, 1688, Taobao, or other destinations.

5.2 Security measures

• Extension storage is isolated by the Chrome extension sandbox; other websites cannot read it.
• Remote APIs used by the Extension are HTTPS.
• Search images are not attached to a Fiktu user account (this Extension has no sign-in).

5.3 Retention periods

6. Data Sharing and Third-Party Disclosures

We do not share user data except as required to perform a search or related feature you start, to operate anonymous analytics, or to comply with law. Every recipient is listed below.

If you are logged into a destination site, that site may associate the upload with your account there. That relationship is between you and that site.

We may disclose data if required by valid legal process, or to investigate abuse or security incidents.

7. Data We Do NOT Collect

• Name, email, phone, postal address, or Fiktu account credentials (this Extension has no login).
• A log of every URL you visit (no browsing-history recorder).
• Passwords, cookies, or form fields of third-party sites (except that submitting an image on a site you opened uses that site’s own upload, which may include that site’s cookies in the browser’s first-party request).
• Payment cards, bank data, health records, or precise GPS.
• Keystrokes, microphone, or camera (screenshot search captures the visible tab only after you choose that command).
• Sale of user data to data brokers.

8. User Consent

Before collection that leaves your device, the Extension relies on affirmative action:

• Installing from Chrome Web Store after the store listing’s privacy disclosure constitutes consent to this policy.
• A search image is transmitted only when you start a search (click the hover button, choose an image in the popup, confirm crop/search, or run screenshot search).
• You can disable the hover button in Options so images are not offered for search until you open the popup.
• You can stop analytics and local history by uninstalling the Extension or clearing its storage in Chrome.

9. Data Deletion Procedures and User Rights

9.1 Delete local data

1. On the Extension search page, delete individual history items if shown.
2. Open chrome://extensions → Fiktu Image Search → Details → clear extension data, or use Options → Reset to defaults for settings.
3. Uninstall the Extension. This removes local storage, history images, settings, and the analytics client id from that browser profile.

9.2 Data on Fiktu servers

This Extension does not create a Fiktu user account. Transient search-proxy payloads are not kept as a retrievable user album. If you believe a server-side record still exists, email fatkunimage@gmail.com with subject Image Search Data Deletion Request. We will review and complete verified deletion of any residual Fiktu-held records within 30 days.

9.3 Data on Google / 1688 / other search engines

You must use that company’s own privacy or account tools. Fiktu cannot remotely delete an image those companies stored after your search.

9.4 Privacy-law rights

Where GDPR, UK GDPR, or CCPA/CPRA applies, you may request access, correction, deletion, restriction, objection, or portability of personal data Fiktu holds, and you may lodge a complaint with a supervisory authority. We do not sell personal information.

10. Chrome Web Store Limited Use Disclosure

11. Children's Privacy

The Extension is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. Contact fatkunimage@gmail.com if you believe a child submitted personal data so we can delete Fiktu-held data.

12. Legal Basis (GDPR / EEA / UK)

• Contract / requested service: processing the image and settings to perform the search you started.
• Consent: installation, each search, optional comparison/price watch, and transmission to a third-party engine.
• Legitimate interests: anonymous analytics to keep site adapters working, fraud/abuse prevention, and security.

13. Permission Justifications

14. Changes to this Policy

We may update this page to reflect product or legal changes. The “Last updated” date will change. Continued use after an update means you accept the revised policy. Material changes will be reflected on this public URL before a new Chrome Web Store version that depends on them.

15. Contact Information & Data Requests

• Privacy & support email: fatkunimage@gmail.com
• This policy URL (use this exact link in the Chrome Web Store Privacy field): https://www.fatkun.net/image-search-privacy.html
• Response time: within 30 days for verified requests.