Google Chrome has implemented a number of HTML5 APIs, including the Geolocation API
and various storage APIs. In this paper we discuss some of our experiences on the
Google Chrome team in implementing these APIs, as well as our thoughts around
privacy for new APIs we are considering implementing. Specifically, we discuss our
ideas of how providing access to things such as speech, web cameras, and
filesystems can be done in ways that are understandable and in the natural flow of
users.