CTVPN

CTVPN — Internal team proxy. Produced by OWEN

CTVPN is a private, internal-use proxy extension built for the employees of our company. It is published as an unlisted item and is not offered as a public VPN service. ── AN ACTIVATION CODE IS REQUIRED (BY DESIGN) ── This extension does nothing without an activation code issued by our administrator. This is intentional, not a defect: it is an internal corporate tool rather than a consumer product. If you install it without a code, you will see an activation screen and nothing else. No proxy is configured, no proxy credentials are delivered, and no network traffic is routed anywhere. The only request made is a license check against our own server. Each code binds to one computer. Administrators can revoke a code at any time, which disconnects that employee within about a minute. ── WHAT IT DOES ── • Routes browser traffic through proxy servers that our company has provisioned • Lets an authorized employee pick which company location / IP to use • Blocks WebRTC IP leaks while the proxy is on, so the real IP is not exposed through non-proxied UDP • Re-validates the license periodically so revoked access stops working • Interface follows the browser language (English / Chinese) ── WHAT IT DOES NOT DO ── • Does NOT record, store, or transmit your browsing history or the URLs you visit • Does NOT read page content, form data, passwords, or cookies • Contains no advertising, no third-party analytics, and no monetization • Does not sell, rent, or share data with third parties • Does not inject scripts into web pages ── PERMISSIONS AND WHY THEY ARE NEEDED ── • proxy — core function: applies the company's proxy configuration • privacy — sets the WebRTC policy to "disable non-proxied UDP" while connected, preventing real-IP leaks; restored to the browser default when disconnected • storage — stores the authorization token and the selected node locally • alarms — schedules the periodic license re-validation • webRequest + webRequestAuthProvider — supplies proxy credentials when the proxy returns HTTP 407, so the browser does not repeatedly prompt the user • offscreen — generates the device fingerprint in an offscreen document, since a service worker has no DOM • notifications — informs the user when authorization has expired • host permission <all_urls> — a proxy applies to all destinations, and proxy authentication challenges can originate from any site. This permission is used solely for proxy configuration and proxy authentication; page content is never read. ── DATA AND PRIVACY ── To enforce one-code-per-computer licensing, the extension sends a device fingerprint (a hash derived from hardware characteristics such as platform, CPU core count, memory size and GPU model). This hash cannot be reversed into the original hardware details and is not used for cross-site tracking. Privacy policy: https://cturl.dpdns.org/legal/ctvpn-privacy ── SUPPORT ── Employees: contact the administrator who issued your activation code.