README.md
1# Consent Auditor
2
3The consent auditor component is a service containing methods used for
4recording and retrieving the records of the exact language the user consented to
5when enabling a feature.
6
7These methods should be called from any UI which enables a feature based on
8the user's consent, and record the consent language that the user has seen.
9If we later find out there was a mistranslation, need to expand the scope of
10a setting etc., we will know which users are affected.
11
12TO EMPHASIZE, these methods should ALWAYS be called from the corresponding UI,
13not from the backend code or pref change observers. The latter could cause
14the consent to be wrongfully recorded if feature was enabled through other
15means (through extensions, a new UI surface added, or even a bug).
16
17Consents related to local features will be stored in a local preference.
18
19Consents related to features for signed-in users will be stored in the user's
20Google account.
21