bjoernch
diff --git a/‎DEVELOPMENT.md‎
Lines changed: 1 addition & 1 deletion b/‎DEVELOPMENT.md‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎PRIVACY.md‎
Lines changed: 44 additions & 3 deletions b/‎PRIVACY.md‎
Lines changed: 44 additions & 3 deletions
diff --git a/‎README.md‎
Lines changed: 2 additions & 3 deletions b/‎README.md‎
Lines changed: 2 additions & 3 deletions
@@ -6,7 +6,7 @@ Internal notes for building, releasing, and publishing Immich Companion. Not use
 
 ```
 manifest.json            MV3 manifest
-background.js            service worker — context menus, omnibox, alarms, badge,
+background.js            service worker — context menus, alarms, badge,
                          message proxy for content scripts
 content.js / content.css runs on every page — toast UI, share-album toolbar,
                          Google search-result card injection
 
@@ -1,6 +1,6 @@
 # Privacy Policy — Immich Companion
 
-_Last updated: 2026-04-25_
+_Last updated: 2026-04-29_
 
 Immich Companion is a browser extension that connects to a self-hosted [Immich](https://immich.app) server you control. It does not have a backend service. All network traffic goes to one place: your Immich server.
 
@@ -30,7 +30,7 @@ The extension talks **only to the Immich server URL you configure**. Specificall
 
 ## Google search integration
 
-The extension has an optional feature ("Show Immich matches on Google", on by default, toggleable in Settings → Features) that displays an inline result card on Google search pages with photos from your library that match the query.
+The extension has an optional feature ("Show Immich matches on Google", off by default, toggleable in Settings → Features) that displays an inline result card on Google search pages with photos from your library that match the query.
 
 **No Immich data ever travels through Google's network.** When you search Google, the extension's content script reads your query from the URL and asks the extension's background service worker to perform a CLIP smart search against your Immich server. The HTTP request goes directly from the background service worker to your Immich server — Google's servers are not involved.
 
@@ -51,6 +51,47 @@ The extension has an optional feature ("Show Immich matches on Google", on by de
 
 To turn the feature off entirely (no requests fired on Google pages, no DOM injection): toggle **Show Immich matches on Google** off in Settings → Features.
 
+## Maps integration
+
+The extension has an optional feature ("Open in Maps", configurable in Settings → Features) that adds a map-pin button to each photo card in the popup. Clicking it opens the photo's GPS location in a third-party maps app. There are three settings:
+
+- **Off** — no button is rendered. No data is transmitted.
+- **Google Maps** (default) — clicking the button opens `https://www.google.com/maps?q=<lat>,<lng>` in a new browser tab.
+- **Apple Maps** (macOS only) — clicking the button hands `maps://?q=<lat>,<lng>` to the OS, which launches the macOS Maps.app. The option is disabled on operating systems that have no handler for the `maps://` scheme.
+
+Only one provider can be active at a time.
+
+**What is sent to the third-party app/service when you click the button:**
+
+- The latitude and longitude of the selected photo, encoded into the URL. This is a navigation (browser tab open or OS handoff), not an API call. The third party sees the request the same way it would if you'd typed the URL by hand.
+
+**What is *not* sent:**
+
+- The image itself, the thumbnail, the filename, the asset UUID, your Immich server URL, or your API key.
+- No metadata beyond the two numbers in the URL.
+
+The button only appears for photos that actually have GPS coordinates in their EXIF data. If a photo has no location, the click surfaces a brief "No GPS info" error and nothing is transmitted. To turn the feature off entirely (no button rendered, no data ever sent): set **Open in Maps** to **Off** in Settings → Features.
+
+## Bug reporting (opt-in, per-click)
+
+The About section in Settings has a "Found a bug?" card that, when clicked, opens a consent modal showing exactly which fields will be added to a prefilled GitHub issue:
+
+- Extension version (read from the bundled manifest).
+- Browser name and version (read from `navigator.userAgentData` or the User-Agent string).
+- Operating system (read from `navigator.userAgentData.platform` plus a high-entropy version pull when the browser exposes it).
+- Immich server version — only included when you have a server configured. The extension makes a single `GET /api/server/version` call to *your own Immich server* (using your stored API key), parses the response, and uses only the resulting `major.minor.patch` string. Nothing else from the response is read.
+
+The consent modal previews these values before anything is sent. The information is transmitted only when you click **Continue** — at which point a new tab is opened to GitHub's prefilled issue form. You can edit any field on the GitHub form, and submitting the issue is a separate, deliberate action.
+
+**What the bug-report flow never includes:**
+
+- Your Immich API key.
+- Your Immich server URL or hostname.
+- Any photo, video, thumbnail, filename, asset id, search history, or upload history.
+- Any data beyond the four lines listed above.
+
+The modal also offers a "Continue without info" button that opens the standard GitHub issue picker without any prefill.
+
 ## Required browser permissions
 
 | Permission                           | Reason                                                                  |
@@ -59,7 +100,7 @@ To turn the feature off entirely (no requests fired on Google pages, no DOM inje
 | `storage`                            | To save your settings locally.                                          |
 | `contextMenus`                       | To add the right-click "Save to Immich" entries.                        |
 | `notifications`                      | To show desktop notifications when an upload finishes.                  |
-| `activeTab`, `scripting`             | To render in-page upload toasts on the source tab.                      |
+| `activeTab`                          | To render in-page upload toasts on the source tab.                      |
 | `alarms`                             | To periodically check whether the Immich server is reachable.           |
 | `clipboardWrite`                     | To copy share links to your clipboard via the "Save & share" feature.   |
 
 
@@ -10,7 +10,7 @@
 
 <p align="center">
   <strong>A community browser extension for self-hosted <a href="https://immich.app">Immich</a>.</strong><br/>
-  Save anything you see on the web, smart-search your library from the address bar, and turn every new tab into a memory.
+  Save anything you see on the web, smart-search your library from the toolbar popup, and turn every new tab into a memory.
 </p>
 
 <p align="center">
@@ -28,8 +28,7 @@ Right-click any image or video on any website to upload it directly to your Immi
 One click uploads the asset, creates a public Immich share link, and copies it to your clipboard — ready to paste anywhere.
 
 ### Smart search, everywhere
-- **Address bar** — type `im` + space + a query for live CLIP-powered results.
-- **Toolbar popup** — phone-gallery-style timeline grouped by month, with sticky date headers and a year scrubber on the right edge. Same view for both your most recent items and search results, with three quick actions on every photo (copy to clipboard, share link, download original).
+- **Toolbar popup** — phone-gallery-style timeline grouped by month, with sticky date headers and a year scrubber on the right edge. Same view for both your most recent items and search results, with quick actions on every photo (copy to clipboard, share link, download original, open in maps).
 - **Google search results** — when you Google something, photos in your library that match the query appear in a card at the top of the results. The search runs entirely between your browser and your Immich; nothing is sent to Google.
 
 ### New tab as a memory feed