# Downez Scrape — privacy and data handling

Updated 2026-11-05.

Downez Scrape reads the website you connect through its toolbar action and the same-origin pages you ask it to collect. Recipe names, source URLs, selectors, navigation settings, cleanup rules, export presets, checkpoints and collected values stay in this browser profile. Cleanup preserves original values alongside transformed results. Results may contain sensitive content from pages where you are signed in.

Free scraping does not require an account. If you connect Pro, the extension stores a signed, product-specific access grant containing an account identifier, extension identifier and validity dates. It contacts https://downez.tech to verify/renew access, normally once a day while the extension is in use. Those requests do not include scraped rows, recipe definitions or browsing history. A still-valid cached grant works through temporary network failures. Downez account and Lemon Squeezy payment handling are described in the website privacy notice.

There are no analytics or advertising scripts in the extension. It does not use the cookies API, synchronize results automatically, or upload collected datasets to Downez. Page navigation naturally contacts the websites you visit. Selected link/image URLs and manually chosen attributes may contain sensitive values. The field picker excludes password inputs.

| Permission            | Purpose                                                                     |
| --------------------- | --------------------------------------------------------------------------- |
| activeTab             | Access to a website after the toolbar action and its same-origin navigation |
| scripting             | Selection and extraction in the connected page                              |
| sidePanel             | Tab-bound workspace                                                         |
| storage               | Access grant, activation nonce and legacy checkpoint migration              |
| alarms                | Recover the run coordinator after worker suspension                         |
| https://downez.tech/* | Renew Pro access with the Downez service; no general website access         |

Only the Downez website can initiate the external activation message. The extension checks its origin, a short-lived connection nonce, a pinned signature and product/extension identifiers before accepting it. Recipe files cannot grant paid access. Private signing keys are kept on the server.

Delete recipes and saved runs in the extension. CSV/JSON and recipe backups are separate downloaded files; manage those at their saved locations. Removing the extension removes its browser-stored data. Website account records and payment-provider records are separate from browser storage. Browser storage can be evicted or reach its quota; keep exports of important data. No remote result backup exists.

Plan capacity and device-dependent run behavior are explained under **Data & limits** in the extension and on the product pricing page. This notice describes data handling rather than replacing those controls. A public support/privacy contact must be supplied before publishing a store listing.
