EXHIBIT SAFETY FILE · LOCAL SOFTWARE
Echowell
Privacy Record
Echowell is a local sonar-exploration game. It requests no Chrome permissions, reads no websites, uses no analytics, sends no gameplay data over the network, and keeps only a compact run save in the browser.
Scope of this policy
This policy describes the privacy behavior of Echowell, a local first-person exploration game delivered as a Chrome extension. It covers the extension package, its extension page, the action button that opens that page, the local save created by the game, and the browser APIs used while the game is running. It does not describe unrelated websites, Chrome itself, or software that is not part of the Echowell package.
Echowell is intentionally designed so that its core gameplay does not depend on a remote service. The facility geometry, sonar logic, collision logic, relay progression, rendering code, user interface, and sound synthesis are contained in the installed extension. The privacy model therefore starts from a simple boundary: game input and save state stay in the browser unless the user separately uses browser or operating-system features outside the game.
Single purpose and gameplay boundary
Echowell has one purpose: provide a local 3D exploration game in which the player navigates a dark facility and reveals geometry by sending sonar pulses. The game uses keyboard input to move, look, change sonar modes, send pulses, and interact with relay stations or the final well interface. Those controls apply only while the Echowell extension page is open and focused.
The extension does not attempt to turn normal websites into game levels, does not observe browsing history, and does not run a content script on pages the user visits. The toolbar action is only a launcher. When pressed, it opens Echowell’s own packaged game.html page. It does not inspect the current tab before doing so.
Chrome permissions
The production manifest requests no Chrome permissions. There is no tabs, history, activeTab, scripting, storage, notifications, or host permission declaration. The extension also does not declare access to any website origin.
The background service worker listens for a click on the extension action and opens the packaged game page. Chrome allows an extension to open its own page without granting it permission to read the contents of unrelated tabs. Because Echowell does not need page data, the product does not request a permission merely for convenience or future use.
Information the game processes
During play, Echowell processes only information needed to run the game: key press state, player position inside the fictional facility, camera yaw and pitch, sonar charge and heat, the selected sonar mode, relay completion flags, elapsed in-game time, and whether the ending has been reached. It also keeps a running count of sonar pulses for the completion summary.
The geometry revealed by sonar is generated from the facility data bundled with the extension. It is not a scan of the user’s room, device, browser page, network, or physical surroundings. Echowell does not request camera, microphone, geolocation, motion-sensor, or filesystem access. The term “sonar” is a game mechanic, not use of an actual microphone or acoustic sensor.
Local save data
Echowell uses the extension page’s localStorage to preserve a small save record. The save includes the player’s in-game coordinates and camera orientation, charge and heat values, sonar mode, which of the three relays are online, elapsed game time, ending state, and the pulse count used for the run summary. This allows a run to survive a page reload or browser restart.
The save does not contain a copy of the rendered point cloud, individual sonar sample points, keyboard history, browser history, visited URLs, account identifiers, or content from other tabs. Point visibility is transient rendering state and is rebuilt from bundled facility geometry when the game runs.
Network behavior
Echowell does not make application-level network requests. The production JavaScript does not call fetch, XMLHttpRequest, WebSocket, EventSource, remote module loaders, advertising endpoints, telemetry endpoints, or cloud-save services. Game execution does not require an internet connection once the extension is installed.
This statement concerns requests initiated by Echowell code. Chrome may independently communicate with Google or other infrastructure for browser functions such as extension installation, update checks, safe browsing, or account synchronization. Those browser-controlled activities are outside the Echowell codebase and are governed by the browser’s own policies.
Audio behavior
Echowell uses the Web Audio API to synthesize short local tones for sonar pulses, relay activation, warnings, and the ending. These sounds are generated mathematically in the browser with oscillators and gain envelopes. The game does not download audio tracks or upload audio information.
Using Web Audio in Echowell does not grant microphone access. The game creates an audio output context only; it does not call getUserMedia, does not enumerate recording devices, and does not analyze microphone input. The player can mute the browser tab or system audio using normal browser or operating-system controls.
Rendering and performance data
The point-cloud view is rendered locally on a canvas. The renderer projects the game’s internal 3D coordinates through the current camera and draws a bounded sample of visible sonar returns. It may calculate frame timing internally as part of ordinary animation scheduling, but Echowell does not record or transmit benchmark results, GPU identifiers, device fingerprints, or hardware profiles.
Sonar pulses precompute nearby facility points and reveal them as the simulated wavefront reaches each point. This processing occurs in volatile memory. Candidate lists exist only for the active pulse and are discarded after the pulse expires. They are not written to the persistent save.
Keyboard and interaction input
The game listens for keyboard events while its extension page is open. WASD movement, arrow-key camera control, Shift, Space, number keys, and the E interaction key are interpreted as gameplay controls. Echowell does not install a system-wide keylogger and cannot receive arbitrary keystrokes from pages that are not the focused game page.
Keystrokes are represented in memory as current pressed-key state so movement can be continuous between keydown and keyup. The game does not create a chronological log of what the user typed. Echowell contains no text-entry field for passwords, messages, account information, or payment information.
No analytics, advertising, or profiling
Echowell contains no analytics SDK, advertising SDK, crash-reporting SDK, fingerprinting library, attribution service, or behavioral profiling system. There is no user account and no identifier generated for tracking a player across installations.
Because no gameplay telemetry leaves the extension, the developer does not receive information about how long a particular user played, which relay they activated first, how many pulses they used, whether they completed the game, or which device they used. Completion statistics shown on screen are calculated from the local run only.
Third parties
The runtime package does not embed third-party web content and does not load JavaScript, fonts, images, audio, or game assets from a third-party CDN. The visual presentation uses browser-available system fonts and assets bundled in the extension package.
Chrome Web Store distribution itself is a third-party platform relationship between the user and the browser/store provider. Store services may process installation or diagnostic information according to their own terms. Echowell does not receive or combine those store records with in-game data.
Retention
The local save remains in the browser profile until it is reset in the game, removed when the extension is uninstalled or its site data is cleared, or deleted by browser/profile management. Echowell does not impose a remote retention period because there is no remote database holding game saves.
Transient animation information has much shorter lifetime. Pressed-key state lasts only while keys are held, active sonar candidate lists last only for the relevant pulse, and visible echo timestamps naturally expire as the point-cloud fade completes. These values are ordinary runtime memory, not retained analytics.
Deletion and reset controls
The opening screen includes a Reset Saved Run control, and the completion screen includes a control to start a new run. These actions remove the Echowell local save and reload the game into its initial state. The user can also delete extension data using Chrome’s extension or site-data controls, or by uninstalling the extension.
Deletion is local and does not need a network request or developer approval. There is no cloud copy for the developer to delete. If the user backs up or synchronizes an entire browser profile using separate software, copies created by that external process are controlled by that software rather than by Echowell.
Security model
Echowell reduces exposure by requesting no Chrome permissions, loading no remote executable code, and keeping its data model small. The extension page is isolated under the extension origin, while game state is stored under that local origin. The package does not intentionally expose a server interface or receive inbound network connections.
No software can promise absolute security. Browser vulnerabilities, malicious local software, compromised operating systems, or unauthorized access to the user’s browser profile could potentially expose local data. Echowell’s design limits the sensitivity of that data: the save represents fictional game state rather than browsing content, credentials, financial information, or private communications.
Children and age-related data
Echowell does not knowingly collect personal information from children or adults because it does not operate a data-collection service. There is no registration flow asking for name, date of birth, school, email address, phone number, precise location, or other profile information.
The game’s dark atmosphere may not be suitable for every player, but that is a content suitability question rather than a data-processing distinction. The privacy behavior is the same for every local user: no account, no behavioral telemetry, no advertising profile, and no remote save.
User choices and browser controls
Players decide when to open the game, when to send sonar pulses, whether to continue a saved run, and when to reset the save. Normal Chrome controls can close the game tab, disable the extension, remove the extension, clear extension data, or mute the game tab.
If reduced motion, display scaling, audio muting, or other accessibility preferences are configured at the browser or operating-system level, those settings may affect the surrounding experience. Echowell does not attempt to bypass user-agent security settings, managed policies, or operating-system privacy controls.
Changes to the product or policy
If a future version changes the categories of data processed, adds a network service, adds a Chrome permission, introduces cloud saves, or otherwise changes the privacy boundary, this policy should be updated to describe the production behavior before or with that release. A cosmetic change that does not change data practices may require only editorial updates.
The effective date and version shown at the top of this record identify the policy associated with Echowell 1.0.0. Users reviewing a later build should rely on the privacy policy supplied for that build rather than assuming every future version behaves identically.
Contact and questions
Questions about Echowell privacy behavior, local storage, permissions, or deletion can be sent through the support/contact method displayed on the Chrome Web Store listing. That channel is preferable to inventing an in-game account or support tracker that would require additional data collection.
When contacting support, users should avoid sending passwords, private browsing content, or other sensitive information because none of that information is required to diagnose Echowell’s normal local-save behavior. A useful report can usually describe the browser version, extension version, and the visible game symptom without attaching personal data.