<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Rosa, thanks a lot for raising this issue. </p>
<p>I agree that such plugins can be an issue with data privacy and
probably security. </p>
<p>I had a look at how Mozilla handles extensions [0] and I agree
that we should aim toward more explicit consent and authorization
model. </p>
<p>Generally speaking, I think we should embrass privacy statements
for our plugin repository. All data collection should be opt-in,
so <span style="mso-fareast-language:EN-US">qgis-geo-knowledge-ai
would then be not conformed with its default permissions. <br>
Ideally a permission system should block a plugin sending data
without explicit permissions. <br>
<br>
</span></p>
<p>Any other thoughts? </p>
<p> </p>
<p>[0]
<a class="moz-txt-link-freetext" href="https://extensionworkshop.com/documentation/publish/add-on-policies/#data-collection-and-transmission-disclosure-and-control">https://extensionworkshop.com/documentation/publish/add-on-policies/#data-collection-and-transmission-disclosure-and-control</a></p>
<pre class="moz-signature" cols="72">Best regards,
Régis Haubourg
Elected member at the Program Steering Comitee of QGIS.org.
-</pre>
<div class="moz-cite-prefix">On 17/06/2026 09:08, Aguilar Bolivar,
Rosa (UT-ITC) via QGIS-PSC wrote:<br>
</div>
<blockquote type="cite"
cite="mid:VI1P195MB07173890D33F48A8D654A5BD83E42@VI1P195MB0717.EURP195.PROD.OUTLOOK.COM">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator"
content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style>@scope { @font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:"Palatino Linotype";
panose-1:2 4 5 2 5 5 5 3 3 4;}@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}@font-face
{font-family:Aptos;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}div.WordSection1
{page:WordSection1;} }</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Dear
PSC, <o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">First,
I would like to express my appreciation for the continuous
efforts invested in maintaining QGIS as a reliable and
high-quality platform.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">I
would like to draw your attention to the growing presence of
AI-related plugins within the QGIS ecosystem.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">In
my view, it is essential to ensure transparency for end
users regarding which large language models (LLMs) are being
utilized, as well as how user data may be processed,
transmitted, or stored.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">As
a specific example, I recently reviewed the Geo Knowledge AI
plugin (<a class="moz-txt-link-freetext" href="https://github.com/robert6757/qgis-geo-knowledge-ai">https://github.com/robert6757/qgis-geo-knowledge-ai</a>)
and observed that no API key is required for its operation.
Upon further inspection of the code, it appears that
requests are routed to a remote server (as indicated in:
<a class="moz-txt-link-freetext" href="https://github.com/robert6757/qgis-geo-knowledge-ai/blob/main/global_defs.py">https://github.com/robert6757/qgis-geo-knowledge-ai/blob/main/global_defs.py</a>).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">While
I am not certain of the best mechanism to address this, one
potential approach could be the introduction of a developer
declaration or compliance option (e.g., a checkbox or
metadata field). This could require plugin developers to
explicitly disclose key aspects such as the underlying AI
model in use and the nature of any data collection,
transmission, or processing. Such measures would enhance
transparency and support users in making informed decisions.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Best
regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Rosa<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div
style="mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;padding:0cm 0cm 1.0pt 0cm">
<p class="MsoNormal" style="border:none;padding:0cm"><span
lang="EN-US"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual">Dr.
Rosa Aguilar | Assistant Professor | University of Twente
| Faculty of Geo-Information Science and Earth
Observation|
<br>
Campus University of Twente, Building Langezijds, room
1322, P.O. Box 217, 7500 AE Enschede, The Netherlands |<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual">T:
+31 (0)53 487 4567 |
<a href="mailto:r.aguilar@utwente.nl"
moz-do-not-send="true"><span style="color:#0563C1">r.aguilar@utwente.nl</span></a>
|
</span><span lang="NL"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual"><a
href="https://www.itc.nl/" moz-do-not-send="true"><span
lang="EN-US" style="color:#0563C1">https://www.itc.nl/</span></a></span><span
lang="NL"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual">
</span><span lang="EN-US"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual">|
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual">Connect
with me on
</span><span
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:black;mso-ligatures:standardcontextual"><a
href="https://www.linkedin.com/in/rosamaguilar/?locale=en_US"
moz-do-not-send="true"><span style="color:#0563C1">LinkedIn</span></a>
<a href="https://rosaguilar.github.io/"
moz-do-not-send="true"><span style="color:#0563C1">https://rosaguilar.github.io</span></a></span><span
lang="EN-US"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:gray;mso-ligatures:standardcontextual">|</span><span
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:black;mso-ligatures:standardcontextual"><o:p></o:p></span></p>
<p class="MsoNormal" style="background:white"><span
style="font-size:7.0pt;font-family:"Verdana",sans-serif;color:black;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="MsoNormal"><i><span
style="font-size:8.0pt;font-family:"Palatino Linotype",serif;mso-ligatures:standardcontextual">The
essential is invisible to the eye. Saint-Exupéry</span></i><i><span
lang="NL"
style="font-size:11.0pt;mso-ligatures:standardcontextual"><o:p></o:p></span></i></p>
<p class="MsoNormal" style="background:white"><span lang="NL"
style="font-size:7.0pt;font-family:"Verdana",sans-serif;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="NL"><img border="0"
width="175" height="52"
style="width:1.825in;height:.5416in"
id="Picture_x0020_1"
src="cid:part1.XLJ4vIRa.ERwNTS4R@qgis.org"
alt="https://www.itc.nl/.uc/fa375379b01021d625f0083ea0d0312ee46ec8ddd8df800/UT%20ITC%20logo%20RGB.jpg"
class=""></span><span lang="NL"
style="mso-ligatures:standardcontextual"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p></o:p></p>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre wrap="" class="moz-quote-pre">_______________________________________________
QGIS-PSC mailing list
<a class="moz-txt-link-abbreviated" href="mailto:QGIS-PSC@lists.osgeo.org">QGIS-PSC@lists.osgeo.org</a>
<a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/qgis-psc">https://lists.osgeo.org/mailman/listinfo/qgis-psc</a>
</pre>
</blockquote>
</body>
</html>