PDD Envoy records the pages you visit (address stripped of query strings, plus page title) and how you interact with them: scrolling, clicks, video play and pause, presence, form interaction as an event only, purchase signals, and the fact that a search occurred on a given engine.

It never records what you type, what you search for, what you enter into forms, or any authored content. The exclusion is enforced at capture, in code.

Data goes to your own account at publicdigitaldomain.org and nowhere else. No third parties, no analytics, no advertising. Extension error reports are sent to the same first-party server for diagnostics and carry no URL and no page origin.

Only what a contract you reviewed and sent to market permits ever reaches an organization. Withheld and blocked material is dropped before delivery.

Your rights: license, withhold, block, export as a ZIP of CSVs, and delete. Deletion stops collection immediately and cannot be undone. Settlement and tax records are retained because law requires it.

Person-scoped reads are served only against a cryptographic signature bound to your own identity key.

Full text: https://publicdigitaldomain.org/policy/rights.html