Privacy Policy

Last updated: February 28, 2026

Overview

DesignGrab is a Chrome extension that helps developers and designers extract design information from websites. We are committed to protecting your privacy.

Data Collection

What we DO NOT collect

We do not collect, store, or transmit any data from the websites you visit
We do not track your browsing history or behavior
We do not sell or share any personal information
We do not use analytics or tracking scripts in the extension

What stays on your device

Design data — All extracted colors, fonts, CSS, and assets are processed locally in your browser and never leave your device
API keys — Your Anthropic API key is stored in Chrome's local storage and is only sent directly to Anthropic's API when you use AI export
Saved library — Your saved colors, fonts, and assets are stored locally in Chrome storage
Usage counts — Monthly usage tracking for freemium limits is stored locally

Optional account data

If you create an account (optional, for syncing and Pro features):

We store your email address and hashed password via Supabase Auth
We store your subscription plan and Stripe customer ID
We store usage logs to enforce plan limits

Third-Party Services

Anthropic (Claude API) — When you use AI export with your own API key, your element's HTML and CSS are sent to Anthropic's API. See Anthropic's Privacy Policy.
Supabase — Used for optional authentication and plan management. See Supabase's Privacy Policy.
Stripe — Used for payment processing. See Stripe's Privacy Policy.

Permissions

DesignGrab requires the following Chrome permissions:

activeTab — To inspect the current tab's content when you activate the extension
scripting — To inject the inspector script into pages
storage — To save your settings, library, and usage data locally
downloads — To download extracted assets (images, SVGs)
sidePanel — To display the DesignGrab panel alongside web pages
host_permissions (<all_urls>) — Required to inspect any website you choose to analyze

Data Security

All data is stored locally using Chrome's built-in storage APIs, which are sandboxed and encrypted by Chrome. Optional cloud data is protected by Supabase's Row Level Security (RLS) policies, ensuring users can only access their own data.

Changes

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

Contact

Questions? Email us at support@designgrab.app.