Extension Privacy Policy – SrcNexus

Effective Date: March 8, 2026

This Extension Privacy Policy explains how extensions (third-party or first-party add-ons) within SrcNexus ("we", "our", or "us") interact with your data. By downloading or installing any extension, you acknowledge and agree to this policy.

1. What Are Extensions?

Extensions are add-on modules that enhance SrcNexus with additional features such as themes, language support, code formatters, and developer tools. Extensions are developed by third-party developers or by SrcNexus and run within a sandboxed environment inside the app.

2. Permissions Extensions May Request

Extensions must declare the permissions they require. You will be prompted before an extension is granted access. The available permission types are:

• Terminal Access – The extension can run terminal commands on your device. You will be asked to approve each command or grant broader access.
• File System Access – The extension can read or write files outside the current project directory. You will be asked to approve each path or grant broader access.
• Project Creation – The extension can create new projects on your device.

Extensions without declared permissions can still access files within the currently open project, register themes, formatters, commands, and editor enhancements.

3. Permission Grant Levels

When an extension requests a permission, you can choose from the following grant levels:

• One-Time – Allow only this specific request. The permission is not stored and will be asked again next time.
• Session – Allow similar requests until you restart the app. Not persisted to storage.
• Permanent – Allow all requests of this type forever for this extension. Stored on your device and persists across app restarts.

You can deny any permission request at any time. Denying a permission may limit the extension's functionality.

4. Network Access

Extensions can make HTTP requests and open WebSocket connections to external servers. This allows extensions to fetch data, communicate with APIs, or provide real-time features. SrcNexus blocks extensions from accessing the app's internal services (localhost ports used by the terminal and app backend) for security, but does not restrict external network requests. You should only install extensions from developers you trust.

5. Data Storage by Extensions

Each extension has its own isolated key-value storage on your device. This storage:

• Is limited to 1,000 keys with a maximum of 4 KB per value.
• Is accessible only by the extension that created it.
• Is completely deleted when you uninstall the extension.

Extensions may also store files within their own directory on your device. These files are also removed upon uninstallation.

6. Data We Collect About Extension Usage

When you install an extension from the SrcNexus Extension Store, we record the installation count and any rating you provide. We do not collect or transmit the contents of your files, terminal commands, or extension storage data to our servers.

7. Security Measures

SrcNexus implements the following security measures for extensions:

• Extensions run in an isolated environment separate from the main app.
• Terminal command injection is detected and blocked (shell metacharacters are rejected).
• File path traversal attacks are prevented through path normalization.
• Access to internal app services is blocked at the network level.
• Extension packages are size-limited during download and extraction (30 MB compressed, 100 MB extracted).

8. Third-Party Extension Developers

Extensions available in the SrcNexus Extension Store may be developed by third-party developers. While we review extensions for basic security and policy compliance, we cannot guarantee the behavior of third-party code.

Third-party extension developers are solely responsible for how their extensions handle your data. If an extension makes network requests to external servers, those servers are governed by the extension developer's own privacy policy, not ours.

9. Revoking Permissions and Uninstalling

You can revoke an extension's permissions or uninstall it at any time:

• Uninstalling an extension removes all its stored data, files, and granted permissions from your device.
• Denying a permission request prevents the extension from performing that action.

10. Changes to This Policy

We may update this Extension Privacy Policy from time to time. Any changes will be posted on this page. Continued use of extensions after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Extension Privacy Policy, please contact us at: support@srcnexus.com

By downloading or installing any extension in SrcNexus, you agree to this Extension Privacy Policy.