Datenschutz der Erweiterung

This version adds section 5 (shipping estimates and voluntary feedback). The effective date shown above is the date of this version.

QC Finder for Taobao, Weidian & 1688 ("the extension") is a browser extension by QCRadar that helps you find indexed QC photos while browsing product links. This notice covers only the extension. For the QCRadar website, see the Privacy Policy.

1. What runs locally

• Link detection runs entirely in your browser. The extension scans pages you have enabled it on for Weidian, Taobao/Tmall and 1688 product links and shows a small QC button next to them.
• No page content and no browsing activity are uploaded during scanning. Scanning itself makes zero network requests; what is sent for status checks is described in section 2.

2. Link status checks — what is sent, and when

Two things trigger a status check, and both send only the platform name and the numeric product ID of a link (for example weidian, 123456) to api.qcradar.com — never the page you are on. Requests are sent without cookies or any account identity.

• Your explicit action: clicking a QC button, using the right-click menu, or pasting a link into the popup.
• Auto-check (on by default, off in one click): on sites you have explicitly enabled, product links are checked automatically as they appear on your screen, so QC counts show without clicking. Links you never scroll to are never checked. Turn this off anytime in the popup settings — the extension then only checks links you click.

• Like any web request, our servers receive standard metadata (IP address, user agent). It is handled as described in the site Privacy Policy and used for rate limiting and abuse prevention.
• If you open a result on QCRadar, the URL carries a utm_content tag that identifies which extension entry point you used (button, right-click menu, or popup) — nothing about the page you were on.

3. Image search — what is sent

Image search runs only when you start it: right-clicking an image and choosing "Find this item with QC", or uploading, pasting or entering an image URL in the popup. The extension never scans or uploads images from a page on its own.

• The image you chose (or its URL) is sent to api.qcradar.com to find visually similar catalog items with QC photos. Like status checks, these requests carry no cookies and no account identity.
• To compute visual similarity, the image is processed by our AI provider DashScope (Alibaba Cloud), as described in the site Privacy Policy. We do not retain the image server-side after the similarity vector is computed; the vector may be cached (keyed by a hash of the image) so repeating the same search is faster.
• An image URL you search can contain temporary tokens from the site it came from; it is fetched once for this search and is not used as an identifier.
• Image searches are logged with standard request metadata (IP address, user agent, result-quality metrics) for rate limiting and abuse prevention.

4. Buying through an agent

When you use the buy controls on a status card or saved item, the extension sends the product identity to QCRadar to request the agents that support it and their purchase links. An agent page opens in a new tab only after your click.

• Outbound purchase links may include a QCRadar referral (affiliate) code, the same as on the QCRadar website.
• When you open a buy link, we record the product identity, the target agent and the entry point (for example an inline card) to measure which links are used. We do not record the page you were on when you clicked.
• Your most recently used agent is remembered locally in your browser so it can be offered as the default next time. It is not sent to us.

5. Shipping estimates and voluntary feedback

When you view shipping estimates or compare agents, the extension sends the product identity, your chosen destination country and any package parameters you set to api.qcradar.com — the same identity rules as status checks apply (no cookies; if you connected your account, the request carries your revocable extension token).

Separately, shipping cards offer an optional form to share real-world numbers. Nothing is collected unless you fill it in and press Send. If you do, we store exactly what the form shows:

• the actual warehouse weight and, if you add them, package dimensions;
• the actual shipping fee you paid, its currency, the agent you paid and, if you add it, the shipping line name;
• the product, destination country, cargo type and the estimate that was on screen at the time (so we can measure how far off we were).

• Why: submissions are aggregated (median deviation per category, agent, country) to improve future estimates. Aggregates are reviewed by QCRadar staff; individual submissions are not published.
• Identity: if you are signed in on the site or have connected the extension, the submission is linked to your account/device so repeated submissions can be de-duplicated. Anonymous submissions store a salted, non-reversible pseudonym of your IP address instead, used only for abuse prevention and de-duplication.
• Retention: feedback is kept for up to 24 months and then purged. Deleting your QCRadar account deletes your submissions entirely (they also stop counting toward calibration). Anonymous submissions are retained under the same 24-month window. You can also request deletion at [email protected].

6. Saving items (favorites)

Saving an item stores it in your browser only by default, with no account required. Building and browsing your saved list, including any status refresh you trigger for it, works exactly like the checks in section 2 and sends nothing more than product IDs.

7. Connecting your QCRadar account (optional)

If you choose "Connect QCRadar account", the extension opens a QCRadar page where you confirm the connection while signed in to the website. It then receives a scoped extension token used for your favorites and their updates, and to carry your identity on shipping/feedback requests you explicitly make (so they count toward your account quotas instead of anonymous ones). It does not read or reuse your website login cookies, and the token cannot change your password or other account settings.

• The connection uses the browser's identity permission to complete the sign-in redirect. No profile information is collected through it beyond the account you approve.
• After connecting, we ask before uploading anything. Only if you confirm "Merge" are your locally saved items added to your QCRadar favorites so they sync across your devices. What is uploaded is the product identity and the time you saved it, never the pages where you saved them.
• You can disconnect at any time from the popup, or revoke the device under Account then Settings on the website. Disconnecting clears the token and any cached account data from your browser.

8. Favorite updates (optional)

When your account is connected, QCRadar checks your favorites about once a day for changes (first QC photos, more QC photos, a source becoming unavailable, or same-item alternatives) and can show a small count on the extension icon. You can turn this off from the popup, which stops these updates from being generated. This first version does not use desktop notifications or email.

9. What the extension never collects

• The URL, title or content of pages you visit, including Reddit posts, Discord messages, forum threads and their authors. The only things that ever leave a page are the product IDs being checked (section 2), an image you explicitly search (section 3), shipping parameters you set and voluntary feedback you type (section 5).
• Your browsing history. Product links are only checked as described in section 2 — and with Auto-check off, that means only links you click.
• Your website login cookies or session. The extension never reads them. Connecting your account (section 7) uses a separate scoped extension token — used only for syncing favorites and for shipping/feedback requests you make, revocable at any time.
• Advertising identifiers or cross-site behavioral profiles. Functional status requests, image-search quality signals and outbound purchase clicks may be logged only as described in sections 2–4; none of those records include the host page you were visiting.
• Anything from sites you have not enabled the extension on — unless you explicitly invoke the extension there yourself (right-click menu or popup).

10. Permissions explained

11. Data retention and sharing

By default the extension stores your settings and saved items in your browser only. Status lookups and image searches reaching our servers are subject to the retention terms of the site Privacy Policy; searched images are not retained after the similarity vector is computed (section 3). If you connect your account, your synced favorites and their update history are stored with your QCRadar account under the same Privacy Policy, and are removed when you delete them or your account. Voluntary shipping feedback is retained as described in section 5. We do not sell personal data and do not share it with third parties for advertising.

12. Changes and contact

We will update this notice when the extension's data practices change, and the extension store listing will always reflect the current version. Questions: [email protected].