This policy covers the Xtractly web app (xtractly.app) and the Xtractly browser extension. It explains what data we collect, why, and how you can control or remove it.
Who we are
Xtractly is run by Donald Alele, trading as Xtractly, based in the United Kingdom. Donald is the data controller for the personal data described here under UK data protection law (the UK GDPR and the Data Protection Act 2018). Contact us at support@xtractly.app.
What the extension does
Xtractly is a Chrome extension that inspects the page you are currently viewing so you can extract UI elements — HTML, CSS, colors, fonts, and assets — into your Xtractly library. It requests broad host permissions (<all_urls>) because you can invoke it on any site, but it only reads page content when you actively trigger a capture, inspection, or color/font pick. It does not run in the background scraping pages you have not interacted with, and it does not collect your general browsing history.
Information we collect
Account information
You sign in with Google or GitHub. We never see your password: the provider confirms who you are and shares your name, email address and profile photo, which we store with a user ID to identify your account, associate it with your saved components/bookmarks, and enforce plan limits.
Content you choose to extract
When you use the extension or web app to extract a component or bookmark a page, we store the resulting HTML/CSS/JSON, the source URL, and any files you explicitly save to your library. We do not capture page content you did not choose to extract.
Usage and billing data
We track usage counters (e.g. how many exports or Agent Bridge saves you have used) to enforce plan limits, and — if you subscribe to a paid plan — payment is processed by Stripe. We do not receive or store your card details; Stripe handles that directly.
Local/device storage
The extension uses chrome.storage to cache your signed-in session and UI preferences (panel state, recent captures) on your device. This data stays local to your browser profile unless it is explicitly synced to your account (e.g. saving a bookmark).
Cookies
xtractly.app sets these first-party cookies. None are used for advertising, and none are shared.
- Sign-in session (set by Convex Auth when you sign in) — keeps you signed in. Strictly necessary.
xt_consent(12 months) — remembers whether you accepted or rejected the cookie below. Strictly necessary.xt_ft(90 days) — only if you click Accept on the cookie banner. Records the page you landed on, the site that linked you (its domain only, e.g. google.com) and any campaign tags in the link. It holds no identifier. If you then create an account, start a checkout, upgrade or click an Install button, we store that event with those details so we can tell which pages are useful to people. Delete account removes these records with the rest of your data.
Rejecting, or changing your mind later, deletes xt_ft. .
Third parties we use
- Google and GitHub — sign-in. They share your name, email address and profile photo with us when you sign in.
- Convex — our application database and sign-in sessions (Convex Auth), storing your account, library, and usage data.
- Stripe — payment processing for paid plans.
- Vercel — hosts the web app, and measures aggregate page views and page speed on it (Vercel Web Analytics and Speed Insights). These use no cookies and don't track you across other sites. They run on xtractly.app only, never in the extension.
We do not sell your data to third parties, and we do not share it for advertising purposes. The use of information received from the Xtractly extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
How we use your information
- To operate your account, library, and saved bookmarks.
- To enforce plan limits and process billing.
- To authenticate the extension against your web-app session.
- To fix bugs and improve reliability.
Our legal basis
- Contract — running your account, library, bookmarks and extension sign-in, enforcing plan limits and processing payments: you asked us to provide the service.
- Legitimate interests — fixing bugs, keeping the service secure, cookie-free aggregate page statistics (Vercel), and recording sign-up and upgrade events so we know which pages help people. You can object at any time.
- Consent — the
xt_ftcookie. You can withdraw it at any time with the link in Cookies above. - Legal obligation — keeping payment records for tax and accounting.
International transfers
Convex, Vercel and Stripe store or process data in the United States. Where your data leaves the UK, it is protected by the safeguards in each provider's data processing terms, such as the UK International Data Transfer Addendum or the UK–US data bridge.
Data retention and deletion
We retain your account and library data for as long as your account is active. You can delete individual components, bookmarks, or design tokens at any time from the app. To delete your account and associated data entirely, use Delete account in Settings, or contact us at the address below.
Your choices
- You can uninstall the extension at any time; this removes its local storage from your browser.
- You can revoke the extension’s access to your account from Settings in the web app.
Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format, and you can withdraw consent at any time. Email support@xtractly.app; we reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page.
Contact
Questions about this policy or your data can be sent to support@xtractly.app.