Black Forest Desk — Privacy Policy
Effective October 16, 2026
Black Forest Desk ("Desk") is a browser extension for Chrome, Edge, and Firefox made by Black Forest Automotive for its own shop computers. It is not a consumer app. This page says what Desk touches, where that data goes, and what we do not do with it.
Questions: service@blackforestautomotive.com
What Desk does
- Prints a LabelWriter label when you click Create R/O in AllData Manage Online.
- Adds an Order reference dropdown of On-the-Lot customer last names on SSF Autoparts checkout.
- Keeps the shop sign-in on this browser in step with Black Forest Tools, our desktop app on the same PC, so unlocking or locking in one does the same in the other.
What Desk handles, and where it goes
Shop sign-in. You pick a shop person and type a desk PIN (4–12 digits) in the Desk popup. Desk sends them over HTTPS to shop.blackforestautomotive.com to sign you in. Desk does not save the PIN and clears the field after you submit. The shop site returns a sign-in token with an expiry; Desk keeps that token, and the name of the selected person, in the extension's local storage on this PC. Desk also reads and writes the shop site's sign-in cookie (bf_shop_gate) so unlock and lock stay in sync. On the shop site, Desk watches the shop's own unlock and lock responses so it can follow them. The shop site keeps its own record of unlocks (who and when) as part of running the shop. That record is the shop site's, not Desk's.
Black Forest Tools on this PC. Desk exchanges the sign-in token, lock state, and the person's display preferences (such as theme) with Black Forest Tools at 127.0.0.1 (this computer only). That traffic does not leave the PC.
AllData Create R/O. Desk only arms on the Create R/O screen. When you create an R/O, it reads the customer's last name, the vehicle model, and the R/O number from that page and sends them to the Labels print service on this PC (127.0.0.1:8080), which prints the label. Desk does not send them to us or to any other server.
SSF Autoparts checkout. Desk asks the shop site, using your sign-in token, for the last names of customers On the Lot, and shows them in a dropdown on the Order reference field. The list is cached in the extension's local storage on this PC so it still works briefly after a hiccup. Desk fills in the name you choose. It does not send anything from the SSF page anywhere.
Updates. Desk checks for a newer version by requesting a small version file from our public GitHub repository (BlackForestPorsche/label-connect). If you click Download update, it downloads our Desk package from that repository's releases. GitHub sees the normal details of any web request, such as your IP address, under GitHub's own privacy statement.
Why Desk asks for each permission
- storage — save the token, selected person, update-check time, and cached lot names on this PC.
- cookies — read and write the shop site's sign-in cookie only, to sync unlock and lock.
- tabs — find open shop tabs to reload after unlock or lock, open the update page, and detect AllData, SSF, and shop pages so features run only there.
- alarms and idle — schedule update checks and retry sign-in sync when the browser wakes.
- downloads — download the Desk update package when you click Download update.
- Website access — AllData Manage Online, SSF Autoparts, shop.blackforestautomotive.com, GitHub (updates), and 127.0.0.1 / localhost (Labels and Tools on this PC). No other sites.
What we do not do
- We do not sell or rent Desk data, and we do not share it with third parties except the services named above (the shop site, which is ours, and GitHub for updates).
- We do not use Desk data for advertising, analytics, profiling, or credit or lending decisions.
- We do not log keystrokes, track location, or collect your browsing history.
- Desk does not run code downloaded from a server. All of its code ships in the package.
- Our use of information received from Chrome and Firefox APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements.
Keeping and deleting data
Everything Desk keeps stays in the extension's local storage on that PC. Locking the shop clears the session. Removing the extension deletes the rest. Shop-site records, such as the unlock record, are kept by the shop and can be removed by asking us.
Changes
If Desk starts handling data differently, we will update this page and its effective date before the new version is released.
Contact
Black Forest Automotive — service@blackforestautomotive.com