Privacy Policy — Design System Extractor

Last updated: August 16, 2026

Purpose

The extension converts a webpage's visual design system—such as colors, typography, spacing, effects, breakpoints, component styles, and optional reviewed component images, and reviewed original visual assets—into a structured local export.

When processing occurs

Processing begins only after you open the extension on the active tab and click “Capture this site's design system.” The extension has no background service worker, requests no host permissions, does not scan other tabs, and does not passively monitor browsing.

Information handled

To provide the export, the extension may handle:

• DOM and CSSOM structure, computed styles, CSS class names, layout geometry, same-origin stylesheet rules, media-query breakpoints, declared font sources, and known webfont stylesheet URLs.
• Open Shadow DOM trees. Closed shadow roots remain inaccessible.
• Short labels for detected buttons and badges, illustration headings, non-sensitive placeholder text, and the page title. Retained text is whitespace-normalized, scrubbed for common email, phone, card-number-like, and SSN-like patterns, and truncated to 40 characters.
• Short numeric leaf text inspected only to recognize metric-like visual regions. Those metric strings are not returned or exported.
• The active page's hostname and path. An original asset's complete URL may be held in memory until Download so the browser can request that checked file. Query strings, URL fragments, and credentials are excluded from exported filenames and metadata.
• When screenshots are enabled, temporary viewport pixels used to create reviewed component crops.
• Selected image sources, inline and external SVGs, CSS background and mask images, video sources, and video posters. These appear as text-only review rows before any external asset request occurs.

Original visual asset behavior

External assets are requested only after you click Download, and only when they remain checked in review. Same-origin assets and cross-origin assets that permit CORS can be included. Inaccessible files are marked as skipped in assets/manifest.json without stopping the rest of the ZIP.

Export is limited to 100 reviewed assets, 10 MB per file, and 50 MB total. SVG animation elements are preserved, while scripts, foreignObject, inline event handlers, and JavaScript links are removed locally before an SVG enters the ZIP. Browser authentication may apply to a same-origin request.

Screenshot and page traversal behavior

The extension may take one temporary viewport capture for visible button, card, and badge previews. It may also temporarily scroll the active document and take multiple viewport captures to crop and stitch selected dashboard-style sections. It never assembles a full-page screenshot.

Temporary viewport images are held in memory only until the relevant crops are created and are not included in the export. Fixed and sticky page elements may be temporarily hidden to prevent duplication; their original inline styles and the original scroll position are restored after capture. Only component crops kept during the review step can enter the downloaded ZIP.

Scrolling can cause the webpage itself to lazy-load its own resources. The extension does not upload page data or make requests to a developer-controlled service.

Information not accessed

• Form values, including .value, .checked, and .files.
• Passwords, payment values, cookies, authentication tokens, localStorage, sessionStorage, or IndexedDB.
• Chrome browsing history, other open tabs, or incognito tabs.
• Closed shadow roots or cross-origin iframe contents.

Non-value attributes such as type, autocomplete, name, and id may be checked to identify sensitive form fields. Identified sensitive fields are excluded; only an aggregate count is retained.

Use, sharing, and sale

Handled information is used only to generate the design-system export you requested. It is not sold, shared, used for advertising or profiling, used to determine creditworthiness, or used for any unrelated purpose. Checked assets may be requested only from their source page or asset host. The developer and other humans cannot access your capture data.

Retention and deletion

Capture data and retrieved asset bytes exist temporarily in the extension popup's memory. The extension does not upload them to the developer or retain a developer copy. Closing the popup releases that in-memory session. If you download an export, the resulting ZIP remains on your device under your control; delete that local file to delete the exported data.

Permissions

• activeTab provides temporary access to the page on which you invoked the extension.
• scripting injects the bundled extraction and capture code after you click Capture and requests checked original assets through the active page context after you click Download.
• downloads saves the locally generated ZIP through Chrome's standard download flow.

No host permissions are requested. All executable code is bundled with the extension; no remote code is loaded.

Chrome Web Store Limited Use

Design System Extractor's use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Information is used only for the extension's disclosed single purpose and is never transferred for advertising or unrelated use.

Your responsibility

Before sharing an exported ZIP, review its metadata, component inventory, and images. Capture only pages you own or are authorized to inspect, and exclude any crop you do not want included.

Changes

If data-handling behavior changes, this policy, the Store disclosures, and the in-product disclosure will be updated before or with the extension update.