Privacy Policy — Sitepeelsitepeel.Your account ↗SITEPEEL / PRIVACY

Privacy Policy

Your account is yours. Your browsing history stays yours.

Updated September 10, 2026

Limited UseAccount securityWhat Sitepeel doesSign-in and your accountWhat happens on a websiteWebsite demoWhen design data is sent to SitepeelOptional AI providersPaymentsProduct videoTransactional emailsUninstall feedbackCookies, local storage, and securityWebsite analytics and recordingsCrawler analyticsGoogle AnalyticsYour analytics choiceContact messagesRetention and deletionService providers and your rightsChangesLimited Use

Sitepeel’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Use of information received through the extension also adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this information only to provide or improve the user-facing features described here, not for advertising, sale to data brokers, or credit decisions.

Account security

We use Cloudflare Turnstile to limit automated signup, sign-in and reset attempts. It processes browser and network signals for this security check. We block known disposable email domains and apply rate limits. Verification links and password-reset codes are single-use and expire after ten minutes. Verification completes sign-in in the browser where you requested it. Authentication emails are delivered through Resend. Sitepeel does not store plaintext passwords or put account passwords in extension content scripts.

What Sitepeel does

Sitepeel provides browser tools for inspecting and extracting website design details. This policy explains the information used by the extension, this website, account services, payments, and transactional email. Contact support@sitepeel.dev for privacy questions.

Sign-in and your account

Sign in with Google or a verified email address and password. Google sign-in requests basic OpenID and email scopes; we do not receive your Google password, Gmail messages, contacts, or Drive files. Supabase Auth verifies email/password accounts and securely hashes passwords. Sitepeel stores provider identifiers, your verified email address, account creation and trial activation times, and access status. Google and email sign-in using the same verified address share an account. Gmail aliases are normalized to prevent repeat trials.

What happens on a website

The extension opens when you click its icon. Inspection, measurements, edits, font previews, page snapshots, and asset collection run in your browser. We do not automatically collect your browsing history or scan other tabs. Some previews and downloads request fonts or media from their original hosts.

Website demo

The homepage tools can be tried without signing in. Their inspection, exports, design prompts and Design MD run locally in your browser. An optional AI request is sent directly to the provider you configure. The demo does not start a trial or change your extension access.

When design data is sent to Sitepeel

In the installed extension, when you request a design prompt or Design MD, the extracted information needed for that action is sent over HTTPS to Sitepeel’s Cloudflare service. This can include page URLs and titles, visible text, selected HTML and CSS, font and asset URLs, component styles, and layout measurements. Avoid using these actions on private or sensitive pages unless you intend to process that information. These captures are processed in memory and are not saved in our account database or intentionally included in application logs.

Optional AI providers

AI is optional. If you connect a provider, your API key is stored on your device and sent directly to the provider you select. In the website tools, these settings are stored for that browser tab. Sitepeel does not receive your provider key. The provider receives the design information needed for your prompt and handles it under its own policies. Any provider usage charges are separate from Sitepeel.

Payments

Dodo Payments is our merchant of record and handles checkout, payment details, tax, and receipts. Sitepeel stores order and payment identifiers, the purchased product, quoted price and currency, regional billing country when applicable, payment status, and the policy version accepted at checkout. We do not store your full card number or security code. See Dodo Payments’ Privacy Policy.

Product video

The product film is hosted by Wistia and loads only when you press play. The embedded player receives the connection information needed to deliver the video, including your IP address. We enable Wistia privacy mode to disable its viewer analytics. The short tool demonstrations are hosted directly on sitepeel.dev. See Wistia privacy.

Transactional emails

Resend sends account and purchase notifications on our behalf, using your account email address. We disable open and click tracking for these emails. They contain account and service information, not a newsletter subscription. Replies go to support@sitepeel.dev. See Resend’s Privacy Policy.

Uninstall feedback

After removal, your browser opens an optional feedback page. We only collect feedback when you submit it. Your message and optional reply email are stored privately in Cloudflare and sent to support@sitepeel.dev through Resend so we can improve Sitepeel and respond. We do not attach your Google account, browsing history, or extension identifiers. The page has no analytics or session recording. A short-lived hash of the connection IP limits spam. Feedback and support emails are retained for product improvement and support; contact support@sitepeel.dev to request deletion.

Cookies, local storage, and security

Essential, secure cookies keep you signed in on the website. The extension stores session credentials in storage restricted to its trusted extension context. We use server-side account records to enforce the 24-hour trial and paid access. Short-lived session tokens, payment verification, and rate limits help protect the service. Infrastructure providers process connection information such as IP addresses; Sitepeel uses hashed IP-based rate-limit records with short retention. No advertising cookies are required.

Website analytics and recordings

With your permission, DataFast measures website visits, referral sources, selected tool actions, sign-in starts and checkout starts. For attributed Sitepeel purchases, Dodo Payments sends DataFast the payment identifier, amount, currency, and available visitor identifier so we can measure which marketing channels lead to sales. PostHog measures page views, tool interactions, sign-in starts, trial activation, checkout starts, and page performance. PostHog also records website interactions such as scrolling and clicks to help us improve the experience. Recordings mask form inputs and edited text; account, settings, code, prompt, and other tool panels are excluded. We do not send account email addresses or AI provider keys to analytics, and we disable console and network-body recording. This tracking applies to sitepeel.dev, not to your activity on other websites using the installed extension. PostHog uses a pseudonymous browser identifier and has IP anonymization enabled.

Crawler analytics

We use DataFast server-side tracking to understand how AI and search crawlers access public pages. Recognized crawler requests may share their user agent, IP address, public path and response status for crawler verification. Query strings, account pages, sign-in routes, API routes and extension tool pages are excluded. This tracking does not collect normal browser visits.

Google Analytics

With your analytics consent, Google Analytics measures page visits, traffic sources, engagement and selected tool actions. We disable Google signals and advertising personalization, and do not send account identifiers, API keys or generated prompts. Marketing campaign parameters may be included; authentication and credential parameters are excluded. See Google privacy.

Your analytics choice

Optional analytics and recordings stay off until you select Allow analytics. Choose Only necessary to use the site without them. Your choice is saved on this browser for 180 days. Change it using Privacy choices in the footer. Withdrawing consent stops future collection, clears analytics identifiers on this site, and reloads the page to unload the trackers; it does not automatically delete previously collected data. We respect browser Do Not Track and Global Privacy Control signals. Ad blockers may also prevent collection. Contact support@sitepeel.dev for deletion requests. PostHog recordings are retained for 30 days. Analytics services process data under their own retention policies; our PostHog project is hosted in the US. See PostHog privacy and DataFast privacy.

Contact messages

When you send our contact form, your name, reply email, optional subject and message are stored privately in Cloudflare and forwarded to support@sitepeel.dev through Resend. We use this information to respond and provide support. We do not attach a Google account or browsing history, and the contact page has no analytics or session recording. Messages are retained for support; contact support@sitepeel.dev to request deletion. Short-lived IP hashes limit spam.

Retention and deletion

Account and entitlement records are kept while your account or purchase remains active. Session credentials expire and temporary sign-in records are removed regularly. Rate-limit records are short-lived. Payment records may need to be retained for accounting, fraud prevention, disputes, or legal obligations. Contact support@sitepeel.dev from your account email to request access, correction, or deletion. Where needed to prevent repeat trials, we may retain a minimal trial-history record rather than restart a used trial.

Service providers and your rights

Google, Supabase, Cloudflare, Dodo Payments, and Resend provide identity, authentication, hosting, payment, and email services. DataFast and PostHog provide optional website analytics. They may process information outside your country. We do not sell your personal information. Depending on where you live, you may have rights to access, correct, delete, or object to processing of your information, and to complain to your privacy regulator. We will assess requests under the applicable rules.

Changes

We may update this policy when the service changes. The date at the top identifies the current policy; material account-related changes may also be communicated by email.

sitepeel.PricingPrivacyTermsRefundsContactPrivacy choicesInspect. Extract. Build.