HDE Connect Chrome Extension
Privacy Policy

Last updated: 09/22/2025

Overview

Health Data Explorer Connect (‘the Extension’) is a Chrome browser extension that facilitates data export from MDILog to Health Data Explorer (HDE). This privacy policy explains what data we collect, how we use it, and your rights regarding that data.

Data Collection

The Extension collects the following types of data:

- Personally Identifiable Information: Name and email address retrieved from Auth0 during authentication to personalize your experience.
   Purpose: User identification and account association with Health Data Explorer.
- Authentication Information: Auth0 access tokens stored locally to maintain your login session.
   Purpose: Secure access to Health Data Explorer API without requiring repeated logins.
- User Activity Data: Export operation logs including timing, success/failure status, and error details. Workspace preferences for selected HDE workspace.
   Purpose: Service improvement, debugging, and maintaining export state across browser sessions.


Data Storage and Processing

Local Storage – All data is stored locally in your browser using Chrome’s local storage API. Data persists until you uninstall the extension or clear browser data. No data is stored on external servers except as described below.

External Data Transmission – Auth0: authentication tokens and user profile data are transmitted to Auth0 for authentication purposes. Health Data Explorer API: export configuration, workspace data, and trace logs are sent to HDE for service functionality. MDILog: the extension interacts with MDILog to perform data exports as requested by you.

Data Usage

Authentication – to securely connect you to your Health Data Explorer account.
Functionality – to enable data export operations between MDILog and HDE.
User Experience – to remember your workspace preferences and maintain export progress.
Service Improvement – to analyze export success rates and identify potential issues.

Data Sharing

We do not sell, trade, or share your personal data with third parties except: Auth0 (for authentication services), Health Data Explorer (for legitimate service operations), and MDILog (for export operations you initiate).

Data Security

All data transmission uses HTTPS encryption. Authentication tokens are stored securely in browser local storage. We follow industry best practices for data protection.

Your Rights

You may access your stored data through the extension interface, clear stored data by uninstalling the extension or clearing browser data, revoke authentication by logging out through the extension, and contact us with privacy concerns.

Data Retention

Local data persists until you uninstall the extension or clear browser data. Authentication tokens expire according to Auth0’s lifecycle. Trace logs are processed by HDE for service improvement and debugging.

Third-Party Services

This extension integrates with Auth0 (privacy policy: https://auth0.com/privacy), Health Data Explorer, and MDILog.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted in the extension and on our website.

Contact Information

For privacy-related questions or concerns, please contact us at hello@healthdataexplorer.io.

Compliance

This privacy policy complies with applicable data protection laws and Chrome Web Store requirements.