Update About > Permissions.

[PrivacyBrowserAndroid.git] / app / src / free / assets / en / about_permissions_light.html

diff --git a/app/src/free/assets/en/about_permissions_light.html b/app/src/free/assets/en/about_permissions_light.html
index f080c069107aa5a8ed7451184793eb5f67aff00b..222a75a4e8dc03bb6123bc3c62fd8716ca56e4fd 100644 (file)
--- a/app/src/free/assets/en/about_permissions_light.html
+++ b/app/src/free/assets/en/about_permissions_light.html
@@ -32,10 +32,14 @@
         <p><a href="https://developer.android.com/reference/android/Manifest.permission.html#INSTALL_SHORTCUT">com.android.launcher.permission.INSTALL_SHORTCUT</a></p>
         <p>Required to add shortcuts for websites to the launcher desktop.</p>
 
+        <h3>Read storage</h3>
+        <p><a href="https://developer.android.com/reference/android/Manifest.permission#READ_EXTERNAL_STORAGE">android.permission.READ_EXTERNAL_STORAGE</a></p>
+        <p>Required to import settings from public folders. On Android Marshmallow (API 23) and newer, if this permission is denied Privacy Browser can import settings from the app’s folders instead.</p>
+
         <h3>Write storage</h3>
-        <p><a href="https://developer.android.com/reference/android/Manifest.permission.html#WRITE_EXTERNAL_STORAGE"> android.permission.WRITE_EXTERNAL_STORAGE</a></p>
-        <p>Required to download files to the public download folder.
-            On Android Marshmallow (API 23) and newer, if this permission is denied Privacy Browser will store downloads in the app’s download folder instead.</p>
+        <p><a href="https://developer.android.com/reference/android/Manifest.permission.html#WRITE_EXTERNAL_STORAGE">android.permission.WRITE_EXTERNAL_STORAGE</a></p>
+        <p>Required to export settings and download files to the public folders.
+            On Android Marshmallow (API 23) and newer, if this permission is denied Privacy Browser can export settings and store downloads in the app’s folders instead.</p>
 
         <br/>
         <hr/>
@@ -44,6 +48,12 @@
         <p>In addition, Privacy Browser Free displays ads from Google’s AdMob network using the Firebase backend.
             For the free flavor, Firebase adds the following permissions even though they are not listed in the manifest file.</p>
 
+        <h3>Read phone status and identity</h3>
+        <p><a href="https://developer.android.com/reference/android/Manifest.permission#read_phone_state">android.permission.READ_PHONE_STATE</a></p>
+        <p>Allows the ads to access to phone state, including the phone number of the device, current cellular network information, the status of any ongoing calls,
+            and a list of any PhoneAccounts registered on the device. This is a dangerous permission and requires the user to explicitly allow it on Android Marshmallow (API 23) or newer.
+            In my testing I have not seen ads attempt to request or use this permission.</p>
+
         <h3>View network connections</h3>
         <p><a href="https://developer.android.com/reference/android/Manifest.permission.html#ACCESS_NETWORK_STATE">android.permission.ACCESS_NETWORK_STATE</a></p>
         <p>Allows the ads to tell when you are connected to the internet and when you aren’t (presumably so they don’t try to reload an ad when you are disconnected).
@@ -53,6 +63,10 @@
         <p><a href="https://developer.android.com/reference/android/Manifest.permission.html#WAKE_LOCK">android.permission.WAKE_LOCK</a></p>
         <p>Allows the ads to keep the processor from sleeping and the screen from dimming, although in my testing I don't think the ads actually do this.</p>
 
+        <h3>Track installs from ads</h3>
+        <p><a href="https://android-developers.googleblog.com/2017/11/google-play-referrer-api-track-and.html">com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE</a></p>
+        <p>Allows other apps to tell if their installation was launched from an ad in Privacy Browser Free.</p>
+
         <h3>Receive data from Internet</h3>
         <p><a href="http://androidpermissions.com/permission/com.google.android.c2dm.permission.RECEIVE">com.google.android.c2dm.permission.RECEIVE</a></p>
         <p>Allows Google to send information directly to the AdView without having to receive a request first (cloud-to-device messaging).</p>