docs: the privacy claim gets stronger, so the documents have to say so
Security Scan (reusable) / Security Scan (push) Successful in 24s
Security / scan (push) Successful in 24s
Build / Build (Release) (push) Successful in 26s

Removing BetterTTV took out the plugin's only outbound network call, and five
documents were still describing it as present. PRIVACY.md led with "one outbound
network call exists by design" -- the opposite of what shipped an hour ago, and
the one claim in that file people actually check.

PRIVACY.md now opens with none at all. The section that described the call is
kept and marked as removed rather than deleted, so the claim can be read against
what it replaced: the startup fetch meant BetterTTV saw an IP as soon as the
plugin loaded, whether an emote ever appeared or not. Worth leaving visible.
BetterTTV also comes out of the third-party table, which now lists only the two
parties nobody using this plugin through Dalamud can avoid.

SECURITY.md listed the EmoteCache HTTP client as in scope for reports. There is
nothing there to report on.

THIRD_PARTY_NOTICES.md named the call as current; both entries it has ever
carried are now historical.

README dropped the pointer to the outbound call and the switch for it, a
stability bullet about a crash fix in code that no longer exists, and the line in
the Chat 2 migration that moved an emote cache directory nothing reads.

ROADMAP gained 2.0.1 and 2.0.2, and a section for what the 2.0.0 push left
behind: 47 overlong comment blocks, channel names translated in only ten of the
25 languages, an orphaned EmoteCacheV1 directory on anyone who ran an older
build, and the deprecated GlobalScaleSafe call that is the last compiler warning
in the build.
This commit is contained in:
2026-08-19 23:41:23 +02:00
parent 16730d5ed9
commit 6e24885241
5 changed files with 64 additions and 52 deletions
+5 -6
View File
@@ -55,13 +55,12 @@ history, including the close of active cherry-picking in the v1.4.x cycle.
## Components that touch the network
Of everything listed above, **none** of the bundled or NuGet components opens network connections on
their own. All outbound traffic is initiated explicitly by HellionChat's own source files and is
documented in `PRIVACY.md` under "Outbound network calls":
their own, and as of v2.0.2 neither does HellionChat itself. Both calls this list used to name are
gone:
- `HellionChat/EmoteCache.cs` → BetterTTV API + CDN (opt-out via setting)
The earlier Square Enix Lodestone font download (`FontManager.cs`) was removed in v1.0.4 — it was a
leftover from upstream's removed webinterface feature and was no longer consumed.
- `HellionChat/EmoteCache.cs` → BetterTTV API + CDN, removed in v2.0.2 along with the emote feature.
- The Square Enix Lodestone font download (`FontManager.cs`), removed in v1.0.4 — a leftover from
upstream's removed webinterface feature that was no longer consumed.
---