Last updated: 2025-01-15
Security
Security is a priority at AliMedia. We implement measures to protect your information and ensure the safe operation of our extension and website.
HTTPS Encryption
Our website (alimedia.io) uses HTTPS encryption to protect data transmitted between your browser and our servers. This ensures that any information you send to us is encrypted and secure.
Local Operation
The AliMedia Chrome extension operates primarily in your browser. Most functionality happens locally on your device, which means:
- Downloads are processed in your browser
- No user accounts or login credentials are required
- Minimal data is transmitted to external servers
- Your browsing activity is not tracked by AliMedia
Least Privilege Access
AliMedia requests only the permissions necessary to function. The extension needs access to AliExpress and Alibaba pages to download images and videos. We do not request unnecessary permissions. Learn more about why we need specific permissions.
Data Protection
We follow security best practices to protect any data we may collect:
- We do not store personal information unless you contact us directly
- Support emails are handled securely
- We do not sell or share your data with third parties
- See our Privacy Policy for details on data handling
Access Control
Access to any systems or data is restricted to authorized personnel only. We implement appropriate access controls and regularly review access permissions.
Vulnerability Reporting
If you discover a security vulnerability in AliMedia, we appreciate responsible disclosure. Please report security issues to:
Email:
b.collette0023@gmail.com
Subject: Security Vulnerability
Report
When reporting a vulnerability, please include:
- A detailed description of the vulnerability
- Steps to reproduce the issue
- The potential impact of the vulnerability
- Any suggested fixes or mitigations
We will acknowledge receipt of your report and work to address verified vulnerabilities promptly. We ask that you:
- Give us reasonable time to fix the issue before public disclosure
- Do not access or modify data that does not belong to you
- Do not disrupt our services or impact other users
- Act in good faith and follow responsible disclosure practices
Third-Party Services
If we use third-party services (such as hosting or API services), we ensure they follow security best practices. Our API service (cors.alimedia.xyz) is operated separately and securely.
Updates and Maintenance
We regularly update AliMedia to address security issues and improve functionality. We recommend keeping the extension up to date. See our Changelog for update information.
Your Role in Security
You can help keep AliMedia secure by:
- Keeping your browser and AliMedia extension up to date
- Using strong, unique passwords for any accounts you use
- Being cautious about downloading content and respecting usage rights
- Reporting security concerns to us
Contact
If you have security questions or concerns, please contact us at b.collette0023@gmail.com or visit our Contact page.