Privacy Policy

This policy explains how FetchRover (“we”, “us”) handles information across the FetchRover Chrome extension and the fetchrover.app website (together, the “Service”). By using the Service, you agree to the practices described below and to our Terms & Conditions. Simply installing or using the extension constitutes acceptance of both.

Scraped page data. Everything you extract with the extension — fields, collections, selectors — is stored locally in your browser (IndexedDB). It never leaves your device and is never sent to our servers unless you explicitly export or sync it.

Account data. If you create a FetchRover account, we collect your name, email address, and a securely hashed password. We never store your password in plain text. If you sign in with Google instead, we collect your name, email address, and profile photo from your Google account (see “Signing in with Google” below), and no password is stored. If you enable two-factor authentication, we store an encrypted secret and recovery codes; if you register a passkey, we store the passkey credential your device creates — we never see or store your device’s private key or biometric data, which never leave your device. Signing in sets a session/authentication cookie needed to keep you logged in, and checking “Remember me” sets one that persists after you close your browser so you stay signed in.

Usage & log data. Like most websites, our servers automatically log standard technical data (IP address, browser type, pages visited, timestamps) when you use fetchrover.app.

We use essential cookies to keep the website and your account session working. We do not use advertising or remarketing pixels.

Anonymous analytics (default). By default the extension sends anonymous usage statistics only — which features are used and how often, for counts such as the total number of scrapes performed. It carries no identifier of any kind — no install ID, no session ID — and no signal about which site you are on, not even a hashed or shortened one. What reaches us is the event itself plus coarse technical context: the extension version, and your browser and operating system family.

Detailed analytics (optional). This is off unless you turn it on. When enabled, we additionally collect the URL of the page you are scraping, the extension scraping configuration (such as the selectors and field setup used), and a randomly generated install ID that lets us tell one installation’s events apart. The install ID is used only for detailed analytics — it is never attached to anonymous events. This is the minimum needed to understand how the extension performs on different websites. We never collect the page HTML or the data you scrape, because pages can contain personal information.

Turning it off. Right-click the FetchRover icon in your browser toolbar and open the extension options page. From there you can disable detailed analytics at any time, and reset the random install ID so that any future events cannot be linked to earlier ones.

Abuse protection. On the detailed tier only, we store an irreversible keyed hash of the sending IP address, used solely to detect and stop abuse of the endpoint. The raw IP address is never stored, and anonymous events carry no such fingerprint at all.

Our web API servers and our Sentry error reporting are both hosted in the European Union, so analytics, feedback, account, and error data stay within the EU.

Two services we rely on may process data outside the EU: hCaptcha, when a spam challenge is shown, and the Google Sheets API, when you choose to export a collection. Those transfers are governed by each provider’s own safeguards and privacy terms, linked in the sections below.

We use Sentry to collect error reports, on servers located in the European Union. Data is sent only when the extension hits an error, and it is used solely to diagnose and fix that error and improve the experience. Reports contain technical error details, not the page HTML or the data you scrape.

The extension includes a feedback form. Whatever you write in it is sent to us so we can respond and improve the product.

Your name and email are optional. You can send feedback without them. If you do provide them, they are used only to reply to you about that feedback — never for marketing.

Optional attachments. The form has a switch to attach scraping details — the extension scraping configuration and the page URL — to help us reproduce the problem. It is off unless you enable it. You may also attach files, such as a screenshot, but only ones you pick yourself; nothing is captured or uploaded automatically. Please check a screenshot before attaching it, since images of a page can contain personal information. Here too we do not collect the page content or the scraped data.

You can create or sign in to a FetchRover account using Google. This is a separate feature from the Google Sheets export below and only shares your basic profile — your name, email address, and profile photo — which Google passes to us after you approve the sign-in on Google’s own consent screen. We use it solely to create and authenticate your FetchRover account. Google’s handling of your data is described in its own privacy policy.

The extension can export a collection directly to Google Sheets. This is optional — it only happens when you choose to export, and only after you grant access through Google’s own consent screen. We use the Google Sheets API solely to write the collection you are exporting into your spreadsheet, and for nothing else. We do not read your other files, and we do not store, share, or transfer your Google user data beyond what is needed to perform that export.

FetchRover’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google’s handling of your data is described in its own privacy policy. You can revoke the extension’s access at any time from your Google account permissions page.

We use hCaptcha to protect our forms from spam and abuse. When a challenge is shown, hCaptcha may collect device and network information (including your IP address) to decide whether you are human. That processing is governed by hCaptcha’s own privacy policy and terms, which apply in addition to this policy wherever hCaptcha is used.

• To provide, maintain, and secure the Service
• To authenticate you and keep your account session active
• To understand feature usage and improve the extension and website
• To diagnose and fix errors reported by the extension
• To protect our forms from spam and abuse
• To respond to support requests and feedback you send us

We do not sell your data. We may share limited data with service providers who help us run the Service — for example, hosting, analytics, error reporting (Sentry), sign-in (Google), and spam protection (hCaptcha) providers — solely to operate FetchRover, and only under obligations to protect it. We may disclose data if required by law.

Analytics. Individual analytics events are kept for a limited time — 90 days — and then deleted. What survives is aggregate counts in summary tables, which carry no identifiers and cannot be traced back to an installation.

Feedback and error reports. Kept only as long as needed to act on them, and deleted once the issue they describe is resolved or has become obsolete.

Bounced and complained email addresses. If an email we send you bounces or is marked as spam, we keep a record of the address and the reason so we don’t keep emailing it. This record is kept separately from your account and survives account deletion, since its only purpose is to avoid mailing an address that has already told us (or its provider) not to.

Account data is retained while your account is active. You can delete your account and its associated data at any time from Settings, or by emailing [email protected]. Deleting your account immediately removes your name, email address, password, passkeys, and two-factor credentials; a minimal record is kept only so that address cannot be silently reused to impersonate the deleted account. Scraped data stored locally in the extension is under your control and can be cleared at any time from the extension itself. This local data is also temporary by nature — it will be lost if you uninstall the extension, clear your browser data, or your browser evicts storage, so export anything you want to keep permanently.

EU/EEA users (GDPR). You have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

California users (CCPA). You have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information — we do not sell personal information.

To exercise any of these rights, contact us using the details below.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page.

Questions about this policy or your data? Email us at [email protected].