Privacy Policy
1. Single Purpose & Scope
SiteScan is an interface reverse-engineering tool built exclusively as a Google Chrome Extension (Manifest V3). Its single purpose is to inspect and analyze the client-side architecture of web pages you browse (DOM layout, computed CSS tokens, typography, animations, responsive breakpoints, and CDN asset references) and synthesize structured build prompts (PROMPT.md) for AI coding assistants.
We strictly comply with Google Chrome Web Store Developer Policies, including the Single Purpose Policy and the Limited Use Requirements for Google User Data.
2. Data Collection & Usage
We believe in complete privacy. We collect only the minimal data strictly necessary for core extension functionality:
- OAuth Profile Google Account Authentication: When signing in via Google Sign-In, we receive your verified email, display name, and unique user ID. This is used solely to maintain your user account state and allocate your free generation credits or verify Pro upgrades in our secure Firebase database.
-
Local Storage
Captured Page Specs & Screenshots: When you click "Capture this page", the extension extracts the active webpage's public DOM hierarchy, computed CSS styles, animations, and viewport screenshot. This data is stored strictly locally inside your browser's
chrome.storage.localand is never sent to our servers. -
AI Prompt Synthesis
Gemini AI API Queries: When you click "Generate bundle", the captured DOM and CSS tokens are transmitted directly to the Google Gemini API (using your configured API key or backend proxy) solely to synthesize
PROMPT.md. Your prompt data is not sold or used to train third-party models.
3. Browser Permissions Justification
SiteScan requests the following minimal browser permissions in manifest.json:
activeTab&scripting: Used exclusively when you click the capture button to inspect the active tab's layout and compute design tokens.storage: Used to persist your Gemini API key, user preferences, and captured page sessions locally on your device.sidePanel: Used to render the SiteScan developer workbench directly inside Chrome's side panel UI.downloads: Used solely to package and save your generatedsitescan-export.zipbuild bundle to your local Downloads folder.identity: Used for standard Google OAuth 2.0 authentication to verify user access and credit allotments.host_permissions: <all_urls>: Required so the developer tool can analyze web interfaces across various domains that you choose to inspect. No automated or background tracking occurs on uninspected tabs.
4. Data Storage & Security
All sensitive tokens (such as your Gemini API Key) are stored exclusively in your local Chrome browser storage (chrome.storage.local) and are never uploaded to our servers.
Authentication tokens and transaction verification requests (UTR submissions) are communicated securely over encrypted HTTPS to Firebase Realtime Database with strict server-enforced security rules.
5. Data Retention & Deletion
You can clear all stored site captures, tokens, and screenshots at any time directly within the extension side panel by clicking the "Clear this site's captures" button, or by uninstalling the extension.
To request complete deletion of your Firebase user account record, please email us directly at sayansenapati2544@gmail.com with the subject "SiteScan Account Deletion".
6. Developer & Contact Information
For any privacy questions, inquiries, or support requests regarding SiteScan, please contact:
- Developer: Sayan Senapati (@senapati484)
- Email: sayansenapati2544@gmail.com
- Official Website: https://sitescan.site