Ripple Remote Control

Ripple Remote Control pairs with the Ripple video-call web app. During a call,
your partner can click, scroll, and type in one browser tab that you have
selected and approved. The extension exists so a remote peer can drive a
specific page on your screen, with your explicit consent, while you talk.

How it works
------------

1. Start or join a Ripple call at the Ripple web app.
2. Switch to the tab you want your call partner to control, then open the
extension popup and click "Use current tab".
3. Chrome asks you to grant the extension access to that site. The extension
only gets access to the site you approve, not to every page you visit.
4. Your call partner can now click, scroll, and type in that tab. Their input
appears as synthetic events in the page you approved.
5. Stop the session at any time from the popup, or revoke site access from
Chrome's settings.

What the extension does
-----------------------

- Forwards click, scroll, and keyboard input from your Ripple call partner to
one tab you have selected and approved.
- Remembers which tab you armed across popup opens.
- Asks for permission again when the armed tab navigates to a different site.

What the extension does not do
------------------------------

- It does not run on tabs you have not approved.
- It does not send page contents, form values, or passwords anywhere.
- It does not collect analytics, telemetry, or browsing history.
- It does not contact any server on its own. The only network traffic is the
Ripple call itself, handled by the Ripple web app.

Permissions
-----------

- activeTab and tabs: so the popup can show the tab you are about to arm.
- scripting: to inject the input-replay script into the tab you approved.
- storage: to remember the tab you selected.
- Host permissions are optional and granted one site at a time when you arm
a tab.

Privacy
-------

The extension stores the selected tab's id, URL, origin, title, and your
granted host patterns in local browser storage. Nothing leaves your device
through the extension. Full policy: https://marcus-ripple.netlify.app/privacy

Limitations
-----------

- Synthetic events are best-effort. Some sites ignore events that did not come
from a real user gesture.
- Chrome internal pages, the Web Store, and local files cannot be controlled.
- When the armed tab navigates to a new site, you will be asked to grant
access again.