MLS

Privacy Policy

Last updated:

Maps Lead Scraper (“the Extension”) is developed and maintained by Web Ninja Solutions. This Privacy Policy explains what information the Extension collects, why it is collected, how it is used, and your rights. By installing or using the Extension you agree to this policy.

Key takeaway: Scraped business data never leaves your device. It is stored locally in your browser and exported directly to your own files or Google Sheets account. We do not receive, store, or transmit any scraped lead data to our servers.

1. Who We Are

Web Ninja Solutions is the publisher of the Maps Lead Scraper Chrome Extension. For privacy-related questions contact us at: contact@webninjasolutions.com

2. Data the Extension Collects

2a. Google Account Information (optional)

If you choose to sign in with Google, the Extension requests:

  • openid / profile / email — to identify you and display your name and profile photo in the popup. Stored in chrome.storage.local on your device only.
  • drive.file — to create and append data to Google Sheets that you create through the Extension. We never read or access any existing Drive files.

Google sign-in is optional. Pro users who activate with a license key can use all scraping and CSV export features without connecting a Google account.

2b. Scraped Business Data

When you run a scrape, the Extension extracts publicly visible business information and stores it temporarily in chrome.storage.local. Fields collected may include:

  • Business name, category, and full address
  • Phone number and website URL
  • Star rating and review count
  • Price range, open/closed status, Plus Code
  • Latitude, longitude, and Google Place ID
  • Source website and Google Maps URL
  • Timestamp of scrape
This data is never sent to our servers. It lives only on your device until you export it to CSV or to your own Google Sheets. After export or clearing leads, the data is deleted from local storage.

2c. License Key

Your license key is stored in chrome.storage.local. When validating your license, only the license key string is sent to our license server. No personal data is included.

2d. Usage Counts

Free-plan daily lead counts are stored locally to enforce plan limits. These counters are never transmitted to our servers.

2e. Website Purchases

When you purchase a Pro license on our website:

  • Your email address (to deliver your license key and order confirmation)
  • Payment info (processed entirely by Stripe or Cashfree — we never see card numbers)
  • IP address and browser info (standard web server logs via Vercel)

2f. No Tracking or Analytics

The Extension does not collect or transmit:

  • Browsing history or visited URLs outside the scraping operation
  • Device fingerprints, cookies, or persistent identifiers
  • Crash reports or diagnostic telemetry
  • Analytics events to third-party platforms

3. How We Use the Data

DataPurposeWhere Stored
Google name / email / photoDisplay in popup; no server-side useYour device
Scraped business dataDisplayed in popup; exported on your requestYour device only
License keyLicense validation with our serverYour device + license server
Daily usage countEnforce free-plan limitsYour device only
OAuth access tokenWrite data to your Google SheetsMemory only (never persisted)
Purchase emailDeliver license key; order confirmationOur database (Supabase)

4. Data Shared with Third Parties

4a. Google APIs

If you sign in with Google or use Sheets export, the Extension communicates with Google Identity (OAuth 2.0) and Google Sheets API. Data goes directly from your browser to Google — it never passes through our servers. Governed by the Google Privacy Policy and Google API Services User Data Policy.

4b. License Server (Vercel)

License key validation requests go to our server hosted on Vercel (license-server-rho-gold.vercel.app). Only the license key is transmitted. Vercel server logs may include your IP per Vercel's privacy policy.

4c. Payment Processors

4d. Other Services

  • Supabase — hosts our license and order database (EU-region, encrypted)
  • Resend — sends transactional emails (license key delivery)

We do not sell, rent, trade, or share user data with advertisers or data brokers.

5. Chrome Permissions Explained

  • activeTab — read the URL of the active tab to detect which website you are on.
  • tabs — open detail pages for each business result to extract full contact information.
  • scripting — inject content scripts into Google Maps, Yelp, and YellowPages to read publicly visible business data.
  • storage — save scraped leads, settings, license state, and user profile locally on your device.
  • downloads — save the exported CSV file to your Downloads folder.
  • identity — authenticate with Google via OAuth 2.0 (only when you choose to sign in).

The Extension only runs on: Google Maps, Yelp, YellowPages, Google APIs, and our license server. It does not inject scripts or read content from any other website.

6. Data Retention & Deletion

  • Scraped leads — stored until you click “Clear Leads” or uninstall the Extension.
  • Google account info — stored until you sign out or uninstall.
  • License key — stored until you deactivate or uninstall.
  • Uninstalling — Chrome automatically clears all chrome.storage.local data.
  • Purchase records — retained so you can retrieve your key. Request deletion at any time; note that deleting your record deactivates your license.

To request deletion: contact@webninjasolutions.com. We respond within 30 days.

7. Security

  • All network communication uses HTTPS / TLS.
  • License keys validated via RS256 JWT asymmetric cryptography — private key never leaves our server.
  • Extension CSP prevents execution of inline or third-party scripts.
  • External messages validated against an exact allowlist of permitted origins.
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of data stored in chrome.storage.local on your device.

8. Children's Privacy

The Extension is designed for business and professional use. It is not directed at children under 13. We do not knowingly collect personal information from children. Contact us immediately if you believe a child has provided personal information.

9. Your Rights

  • Access — request a copy of any personal data we hold (limited to purchase/license records).
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your records from our servers.
  • Portability — request your data in a machine-readable format.
  • Opt-out — uninstall the Extension at any time; Chrome removes all local data automatically.

Email contact@webninjasolutions.com to exercise any right. We respond within 30 days.

10. Changes to This Policy

We may update this policy from time to time. When we do, we update the “Last updated” date above. For material changes, we update the Extension release notes. Continued use constitutes acceptance.

11. Contact Us

Web Ninja Solutions
Email: contact@webninjasolutions.com
Website: mapsleadscraper.com