CKB Fiber Remote — Testnet

Scope and single purpose

This policy applies only to CKB Fiber Remote — Testnet. Its single purpose is to let a user approve CKB Fiber testnet requests from websites without granting those websites unrestricted node access.

Data handled locally

• The FNN RPC URL selected by the user.
• A list of website origins the user has approved.
• A WebAuthn credential identifier used to request device verification. Biometric data never becomes available to the extension.
• Transient payment, invoice, channel, and node responses needed to complete user-requested actions.

Network transfers and third parties

• Fiber JSON-RPC requests are sent only to the FNN endpoint configured by the user. That node's operator can observe the RPC data it receives.
• A public CKB testnet address may be sent to testnet.ckbapp.dev to query testnet capacity.
• The extension does not send analytics, advertising identifiers, or browsing history to the developer.

Security

• Remote endpoints must use HTTPS. Plain HTTP is accepted only for localhost and 127.0.0.1.
• Payments and channel-opening requests require an extension-owned confirmation window and device-level WebAuthn verification.
• The configured FNN node remains responsible for its own keys, access control, availability, and backups.

Retention, deletion, and sharing

Local settings and testnet state remain on the user's device until the user clears the extension's data or uninstalls it. The developer does not sell user data, use it for advertising, permit human access to it, or share it except for the operational network transfers described above.

Chrome Web Store Limited Use

Information received through Chrome extension APIs is used only to provide or improve the extension's disclosed single purpose. Its use complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Support and policy changes

Questions and security reports can be filed through the Fiber WebLN issue tracker. Material changes to data handling will be reflected here and in the extension's disclosures before release.