Permissions

CrawlPilot requests a small set of Chrome permissions to do its job. This page explains what each permission is, why it's needed, and what it does not do.

Permissions Requested at Install

These permissions are granted automatically when you install CrawlPilot:

Permission	Why it's needed
Active Tab	Reads the URL and title of the tab you are currently viewing so tools know where to operate
Scripting	Injects interaction scripts into pages to select elements, scroll, click, and extract data
Storage	Saves your preferences (language, settings) in Chrome's local storage
Side Panel	Displays the CrawlPilot UI in Chrome's built-in side panel
Downloads	Allows bulk image downloads via Chrome's download API
Alarms	Keeps the background service worker alive during long extraction jobs to prevent timeout

The Host Permission Prompt

On first use of the List Extractor or Page Extractor, Chrome shows a dialog:

"Allow CrawlPilot to access all websites?"

Click Allow to enable CrawlPilot to inject scripts into any website you visit. This is required for data extraction.

Warning

Without this permission, CrawlPilot cannot read page content and extraction tools will not function.

Granting Permission Manually

If you dismissed the prompt or want to change the setting:

02
Go to chrome://extensions
04
Find CrawlPilot → click Details
06
Under Site access, select On all sites

Revoking Permission

You can restrict CrawlPilot to specific sites at any time from the same Details page. Select On specific sites and enter the domains you want to allow.

Pages Where CrawlPilot Cannot Run

Certain pages are off-limits for all Chrome extensions by design:

chrome:// URLs (Chrome's internal pages like Settings, Extensions)
chrome-extension:// URLs
Chrome Web Store pages (chromewebstore.google.com)
PDF files opened directly in the browser
Pages inside sandboxed cross-origin iframes

Attempting to use CrawlPilot on these pages shows an error or produces no result — this is expected behavior and not a bug.

Data Privacy

CrawlPilot stores all extracted data locally on your device using Chrome's IndexedDB. No extracted data is sent to CrawlPilot's servers.

The only network call involving your page content is the Text Summarizer, which sends page text to Anthropic's API for AI processing. All other tools operate entirely offline.