Permissions & Privacy

CrawlPilot asks Chrome for a small set of permissions. This page explains each one, the one-time Allow step, and where your data goes.

Permissions Granted at Install

PermissionWhy it's needed
Active TabReads the page you're on when you open CrawlPilot or click a tool
ScriptingStarts CrawlPilot's reader in your tab and in the background tabs of a run, and records a page's API calls when you ask (API Finder)
StorageSettings, your preferences, and the state of a run, so a long run survives a restart of the extension's background worker
Side PanelCrawlPilot's interface is a Chrome side panel
DownloadsSaves the files you export (CSV, JSON, Excel) and the images you download
AlarmsKeeps the background worker alive during a long run you started, so it isn't cut off part way

Access to Websites: Allow Once

CrawlPilot doesn't ask to read websites at install. The first time a tool needs to read a page, the side panel shows a banner:

CrawlPilot can't see this page yet Allow access once so CrawlPilot can read and pick from this tab

Click Allow, then confirm in Chrome's dialog. This lets CrawlPilot read the pages you point it at, and continue a run onto the next page or site.

When you connect Google Sheets, Chrome also asks to allow Google Apps Script (script.google.com), so rows can reach your own script.

Changing It Later

  1. 01
    Go to chrome://extensions.
  2. 02
    Find CrawlPilot and click Details.
  3. 03
    Under Site access, choose On all sites, On specific sites, or On click.

If you limit access, CrawlPilot can't read the sites you've left out, and runs that move across sites stop at them.

Pages Where CrawlPilot Can't Run

Chrome blocks all extensions on some pages:

  • chrome:// pages (Settings, Extensions) and other extensions' pages
  • The Chrome Web Store
  • PDF files opened in the browser

On these pages the side panel asks you to open a web page (http or https).

Your Data

CrawlPilot collects nothing. There are no analytics, and you don't need an account.

What stays on your device: the pages read, the data you extract, Page assistant briefs, and AI prompts and answers. The AI tools use Gemini Nano, the model built into Chrome, which runs on your computer.

What leaves it, only when you set it up:

  • Rows sent to your own Google Apps Script (Google Sheets sync)
  • Rows sent to webhooks, Airtable or Zapier addresses you enter in Settings
  • The requests to the sites you scrape, made with your own browser session, like any page you visit

See the Privacy Policy for the full statement.