Legal
Privacy Policy
This policy explains how Design Extractor collects, uses, shares, and protects information when you use the Chrome extension, website, and related services.
Effective date: April 19, 2026
1. Information We Collect
When you sign in with Google, Design Extractor receives your email address, Google account ID, display name, and profile avatar URL so we can create your account, maintain your signed-in state, manage quotas, and show account information.
When you choose to analyze the active page, the extension may process the page hostname, page title, CSS variables, computed styles, fonts, colors, spacing, layout, animation, transition, transform, shadow, gradient and background signals, visible screenshots, and generated DESIGN.md content.
For signed-in users, we store quota usage, analysis success or failure state, timestamps, saved analysis history, plan tier, Stripe customer or subscription identifiers, and subscription status. We do not store full payment card numbers.
If you configure your own AI API key, API base URL, model, or reasoning setting, those custom settings are stored in Chrome local extension storage and used only for requests you initiate.
2. How We Use Information
We use information to provide AI-assisted web design analysis, generate and export DESIGN.md reports, authenticate users, save analysis history, manage monthly quotas, process subscriptions through Stripe, prevent abuse, debug failures, maintain service security, and respond to support or privacy requests.
We do not sell user data. We do not use collected web page content, screenshots, Google account information, or analysis history for advertising.
3. Chrome Extension Permissions
activeTab is used to access the current tab after user action. scripting is used to inject the collector script. storage is used for local settings. sidePanel is used to display the extension UI. downloads is used to save generated reports. tabs is used to open sign-in, settings, subscription, and related pages and detect active tab changes.
Host permissions are used so users can analyze websites they choose, communicate with the Design Extractor API, and complete Google sign-in.
4. Google API Limited Use Disclosure
Design Extractor uses Google OAuth only for sign-in and account identity.
Use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
We do not use Google user data for advertising, do not sell Google user data, and do not transfer Google user data except as necessary to provide or improve user-facing features, comply with law, protect against abuse, or as otherwise allowed by applicable Google API Services User Data Policy and Chrome Web Store policies.
5. How Information Is Shared
We share information only as needed to operate the product, including with Google for OAuth sign-in, AI model providers for analysis generation, Supabase or database hosting providers for account and history storage, Stripe for payments, and hosting or infrastructure providers for service delivery and security.
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, security, and integrity of users, Design Extractor, or others.
6. Data Retention and Security
We retain account, quota, billing metadata, and saved analysis history for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.
We use reasonable safeguards, including HTTPS, authenticated API endpoints, session protection, and access-limited service credentials. No method of transmission or storage is perfectly secure.
7. Your Choices and Rights
You can sign out, remove locally stored custom API settings, uninstall the extension, or contact us to request access, correction, export, or deletion of personal information.
Depending on your location, you may have additional privacy rights under applicable law.
8. Children, International Transfers, and Changes
Design Extractor is not intended for children under 13 or the minimum age required by applicable law. We do not knowingly collect personal information from children.
Your information may be processed in countries other than your country of residence, depending on our service providers. We may update this policy from time to time and will update the effective date when we do.
Contact
For privacy requests or questions, contact us at support@getwebdesign.top.