Privacy Policy

Overview

Browser Extractor is designed to inspect public webpages and extract design-related evidence such as colors, typography, visual assets, UI patterns, and audit findings. The extension is built with a local-first approach and does not require an account for core scanning.

Information Processed By The Extension

When you run a scan, the extension may process information from the active webpage, including:

• Page URL, domain, and title.
• Visible text used to understand labels, headings, navigation, and UI patterns.
• Computed styles such as colors, fonts, spacing, shadows, borders, and layout signals.
• Image and asset URLs visible on the page.
• Best-effort screenshots used for audit evidence where browser permissions allow.

Local Storage

Scan results are stored locally in your browser profile using browser storage such as IndexedDB and extension session storage. Projects, scans, extracted assets, audit reports, and token data remain on your device unless you choose to export or share them. Copy element keeps the one element you copied (its markup and styles, the addresses of its images and fonts, and a picture or a three-second recording of any canvas in it) in the extension’s local storage, so you can paste it on another site you open with Inspect; copying again replaces it, and it never leaves your device. Copy code writes the selected element’s HTML and CSS, with notes on what the page’s JavaScript does on it and the page’s script addresses, on your device and copies them to your clipboard; the page’s scripts are not copied or run.

What We Do Not Collect

• We do not collect cookies.
• We do not collect request headers.
• We do not extract or retain passwords, authentication tokens or payment data, or upload them to our servers.
• We do not collect browser localStorage or sessionStorage from scanned sites.
• We do not require login or cloud synchronization for core extension use.
• We do not receive the URLs, domains or content of the pages you visit or inspect on our servers. The extension processes this information locally for the tools you request and may save it in local scan reports. If you use Your AI, the parts you choose go from your browser to your own AI provider, never to us (see below).

AI And External Services

Your AI (your own key). AI mode and Audit with AI can use an AI provider you choose in Settings: Anthropic, OpenAI, Google Gemini, or a server that speaks the OpenAI format (for example OpenRouter, Ollama or LM Studio). Nothing is sent until you set it up and confirm, once per provider, what will be sent. Then, only when you send a message or run an AI audit, the extension sends directly from your browser to that provider, using your key:

• In AI mode: what you type, earlier messages in that conversation, the page title and address (without query or fragment), and the context you keep switched on: the element you picked (its selector, a short piece of its text, its size and computed styles), your inspector edits (before and after values) and the latest audit's findings for that tab.
• In Audit with AI: the audit's findings with their evidence, and page signals (title, domain, address without query or fragment, detected colors, fonts, technologies and content signals), with email addresses, phone numbers and key-like strings removed.

Images: AI mode sends an image only when you paste, drop or attach one, including a picture of the element you picked with Attach; it then goes to your provider with your message, like the text. Never sent: cookies, form values, the page's full HTML, or anything to Browser Extractor. We don't receive, store or see your conversations, images, reports or key. Your provider's own terms and privacy policy apply to what you send it, including whether it keeps or uses it. Some providers, and many free models, may keep or train on what they receive. Where the provider lists prices, Settings can limit AI to free models, and for OpenRouter it can ask for providers that don't keep what you send (this leaves fewer free models). Answers are shown as text and never run as code.

Your key. The key stays on this device, in storage only the extension's own pages and service worker can read (not the websites you visit, and not the extension's page scripts). It is sent only to the provider it belongs to, and never to us. If you switch on "Forget the key when Chrome closes", it is kept in memory only. Remove key in Settings deletes it. AI conversations live in the open panel only and are gone when you close it; a finished AI audit stays with your scan results in this browser session.

Our AI. Our own AI service is not available yet. Choosing it shows the early-access waitlist below; nothing is sent to an AI service.

Prompts for AI tools. Create like this, Fix with AI and Prompt from edits write a prompt on your device and copy it to your clipboard. When you press Copy screenshot, the extension captures the current tab on your device for that prompt. The extension sends neither to any AI provider or to us: you choose where to paste them, and that tool's own privacy terms then apply. If anonymous usage is on, we count only which tool from the list the prompt was written for, never the prompt.

Responsive previews. When you open Responsive, the extension shows the page you are on at the device sizes you choose, in frames inside that same page. Each frame loads the page’s own address again in your browser, so the website runs as usual: its scripts, requests and cookies work, and clicking, typing or submitting in a frame affects the real website, as it would in a tab. The frames cannot navigate or reload the page you are on. Your visual edits stay on the original page and are not copied into the frames. Nothing is uploaded: we do not receive the pages, what you do in them or any image of them, and no response headers are changed.

When a website does not allow itself to be shown in frames, Responsive can open the page in a window of its own at one device size. The window loads the page address like any new window and nothing else is read from it. The extension asks for no debugging permission. Device names describe Chrome viewport presets, not physical-device or Safari emulation.

Local performance checks. The extension observes loading, layout stability and bounded request/task timings on the page you scan. Refresh measurements reads that loaded page without reloading it, opening test tabs or interacting with website controls. Results stay on-device. Audit device-profile testing is paused in this build; saved results from earlier versions remain locally available.

Performance evidence includes timings, byte counts, response status, content type, compression and cache-policy headers. Captured resource URLs omit credentials, query strings and fragments. Request headers/bodies, cookies, authentication headers and response bodies are not recorded. Device results use extension session storage; scan reports and exports stay on your device. No scan content or performance results are sent to us or a remote testing service.

Color picker and fix previews. The color picker reads a capture of the current tab on your device. Previewed fixes change the page only in your browser, until you undo them or reload.

Fonts. Only when you press Get or Find next to a font, the extension asks Google Fonts whether it has that family, and opens the result in a new tab: the family’s Google Fonts page or, when Google Fonts does not have it, a Google search for the font name. Only the font name is sent, and only at that moment. If you pick a font from the list to preview it on a page, your browser loads that font from Google Fonts for the preview.

Anonymous Usage Statistics

Share anonymous usage is on by default. Nothing is counted or sent until the extension has shown you a notice: the welcome page for new installations, or a short note in the panel for people who updated. To turn it off, open the extension, press the Settings (gear) button, and use the switch under Privacy. If you turned it off before, it stays off. Feature-use counts help us improve the extension.

What is sent. One set of counts per day you use the extension:

• How many times you scanned a page, opened the toolbar and opened the popup.
• How many times you used each toolbar tool (inspect, pick color, responsive view, Localize, Extract, Audit, AI mode), and each popup tab (colors, fonts, assets, tech, audit, tokens).
• How many times you copied or downloaded something, by kind only (for example a color, a font, an asset, design tokens, a color palette, an audit report or a prompt for an AI tool), and how many times you previewed a fix on the page, which token format you chose (for example CSS variables or Tailwind), and which AI tool a copied prompt was written for, from the list in the extension. Never what was copied or where it came from.
• How many AI requests made with your own AI key succeeded, by what they were for (an AI mode message, an AI audit, improving a prompt or a Localize translation) and the provider family (Anthropic, OpenAI, Google Gemini or OpenAI-compatible). Never your prompt, the reply, the model name, your key or the page.
• Which device sizes you previewed in the responsive view, from the extension’s own list (for example Phone or iPad mini), and which of the extension’s keyboard shortcuts you used, counted at most once per shortcut per page load. Never the page, its address or what the shortcut acted on.
• How many scans could not run, and a general reason (for example the page type is not supported, the browser blocked access, or the scan timed out). Never the page, its address or the error text.
• How many times something went wrong, by general kind only (for example an unexpected error in the extension, the side panel not opening, an AI request failing because of a rate limit, a timeout or a setup problem, or Localize or a copy failing), and how many stars you gave in the extension’s own rating prompt (1 to 5, never the note you may write, which is only sent if you choose to send feedback). Never the error text, the page or its address.
• A random install ID created by the extension, whether it is a new or existing install and its install date, the extension version, your operating system, Chrome version and browser language.
• Your approximate country, which our hosting provider derives from the request. We do not store your IP address (see Abuse Protection below for the one-way hash used to limit abuse).

What is never sent. URLs, domains, page titles, page content, screenshots, scan results, anything you type, or your email. Usage statistics use a pseudonymous installation ID rather than your name or email. Because each day’s counts carry the same random install ID, we can see how often one install comes back and which features it uses; that ID is not linked to a person. If you join the AI waitlist while sharing is enabled, your signup and usage counts share the same install ID, so those counts can be linked to the email you submit.

Turning it off. The extension stops counting, discards unsent usage counts and optional waitlist-interest events, and asks our server to delete stored usage records and optional interest events for your installation. It also removes usage fields from waitlist records. It retries this request if offline. Your submitted signup and feedback remain until you request their deletion separately.

Retention. Daily counts are kept for 13 months, then deleted. They are stored with our hosting and database providers (Vercel and Neon). We don’t sell or share them.

Abuse Protection

To keep our endpoints from being flooded, each request is counted against a one-way (salted SHA-256) hash of the sender’s IP address, never the address itself. The hash is not linked to your install ID, your email or anything you scanned, and is deleted after about a day.

Uninstall Survey

When you remove the extension, Chrome opens a page on our website with one optional question about why. If you answer, we store your chosen reason, any note you write, the extension version and your approximate country (derived by our hosting provider; we do not store your IP address; see Abuse Protection). The answer is not linked to your install, your email or anything you scanned. Ignoring the page sends nothing.

Feedback You Send

The extension’s Guide has a Send feedback form. Nothing is sent unless you press Send. With your message we receive your name and email only if you typed them, plus details that help us fix problems: the extension and Chrome versions, operating system, processor type and language, the random install ID, whether you are a new or existing user and your install date, the usage-sharing choice, usage counts only when sharing is enabled, how many colors, fonts and assets your last scan found, and up to five recent error messages from the extension with any web addresses removed. We never receive the URLs, titles, content or screenshots of the pages you visit. We use it only to answer you and to improve the extension. It is stored with our hosting and database providers (Vercel and Neon), and we delete it on request through the contact address below.

AI Early-Access Waitlist

Our AI, the built-in AI service for AI mode and AI Audit, is not available yet. Choosing it opens an optional waitlist inside the extension. Here is exactly what the waitlist sends and why. (Using your own key is described under Your AI.)

Before you join. Only when optional usage sharing is enabled, opening a waitlist or starting to type an email can send an interest event. These events contain no typed text or email. It contains which waitlist it was (AI mode or AI Audit), the time, the extension version and a random install ID created by the extension. It does not contain your email or anything about the pages you visit. Each event is sent at most once per waitlist.

When you join. We receive:

• Your email address, and which waitlist you joined from.
• What you said you would use AI for, if you picked any of the listed options.
• Whether you were a new or existing user, your install date or first recorded use, and your previous extension version when known.
• Only when usage sharing is enabled: local feature-use totals such as scans, site counts without site identities, toolbar sessions, days active, and tool and tab counts.
• Your browser language, operating system and Chrome version; waitlist-open counts and previous interest events only when usage sharing is enabled.
• Your approximate country, which our hosting provider derives from the request. We do not store your IP address (see Abuse Protection below for the one-way hash used to limit abuse).

We never receive the URLs, domains, titles, content, screenshots or scan results of the sites you inspect.

Why. To measure genuine interest in the AI features, to decide who gets early access first, and to email you about AI early access. We don’t send other marketing, and we don’t sell or share this data. It is stored with our hosting and database providers (Vercel and Neon), who process it on our behalf.

Retention and deletion. We keep waitlist records until early access has rolled out. You can ask us to delete your signup at any time through the contact address below; we remove your email and every event from your install.

Exports And Downloads

You control exported files. If you download reports, token JSON, clone artifacts, or copied assets, those files are handled by your browser and local device.

Data Deletion

The extension dashboard allows you to delete individual scans, delete projects, and clear stored dashboard data from local browser storage.

To remove an AI waitlist signup, contact us as described below and we will delete it, along with its interest events and usage counts.

Turning off Share anonymous usage requests deletion of server-side usage counts and optional waitlist-interest data for your installation. Offline requests retry later. This does not delete an explicitly submitted signup or feedback message.

Chrome Web Store Limited Use

Browser Extractor uses information obtained through Chrome permissions only to provide or improve its stated website inspection, design evaluation, responsive comparison and export features. Its use of that information follows the Chrome Web Store User Data Policy, including the Limited Use requirements.

We do not sell user data, use it for personalized advertising, or use it to determine creditworthiness or for lending. Page evidence stays on your device. Data you choose to submit to us is handled by our hosting and database providers to operate these features, respond to feedback and provide requested early-access updates. We do not transfer it for unrelated purposes.

We read feedback you explicitly send to help answer you and fix problems. We do not have access to your local inspected pages or captures. Our service endpoints use HTTPS; ordinary requests made by Responsive’s frames are governed by the websites and resource providers you choose to access.

Contact

For privacy questions or to have your data deleted, email islamalsoultan@gmail.com. To remove a waitlist signup or usage data, include the email you used or say that you turned usage sharing off; we reply within 30 days and confirm once it is deleted.