Privacy policy for the CloneWebsite Chrome extension and design importer plugin
2026/07/18
CloneWebsite includes a Chrome browser extension ("the Extension") that captures webpages and a design importer plugin ("the Plugin") that imports local .cdesign files into Figma design. We are committed to protecting your privacy. This policy explains what data each product accesses and how it is used.
Last updated: July 18, 2026
The following data is stored only in your browser's local storage (chrome.storage) and IndexedDB:
.cdesign Figma capture archives, and extracted files from pages you clone, saved to IndexedDB for offline access.chrome.storage. This data never leaves your browser except to connect directly to the AI endpoint you configure.| Permission | Purpose |
|---|---|
scripting | Injects content scripts into the active tab to extract DOM structure, computed styles, and resources from the page you choose to clone. |
storage | Saves extension settings, AI configuration, and cloned projects to local browser storage and IndexedDB. |
debugger (required install-time permission) | Chrome does not support debugger as an optional permission, so it is granted when the Extension is installed. The Extension only attaches the debugger during a user-initiated Enhanced Figma capture and detaches in a finally block when the capture ends (including on error, cancellation, or timeout). It is never used in the background, on a timer, or automatically. The debugger is used solely to read rendered page state via a small set of Chrome DevTools Protocol commands: Emulation.setDeviceMetricsOverride / Emulation.setEmulatedMedia to emulate a chosen viewport and prefers-color-scheme, CSS.forcePseudoState with DOM.querySelector to capture components in their hover/focus/active states, and Page.captureScreenshot to create local PNG raster fallbacks for subtrees CSS cannot represent (cross-origin iframes, <video>, filter, backdrop-filter, mask). All emulated state is restored before detach. The captured bytes stay local — they are written into a .cdesign archive saved to your browser storage or downloaded, and never sent to our servers. The debugger is not used to intercept, read, or modify network traffic, cookies, storage, auth tokens, or payment data, nor for analytics or advertising. |
<all_urls> (host permission) | Allows cloning of any webpage you visit. The Extension only acts when you explicitly trigger a clone action. |
https://api.openai.com/* (optional host permission) | Used only if you enable the BYOK AI feature and configure an OpenAI-compatible endpoint. This permission is requested dynamically based on your configured Base URL. |
The Extension includes an optional AI-assisted code editing feature that uses your own OpenAI-compatible API key ("Bring Your Own Key"). When enabled:
The Extension does not integrate with any third-party analytics, advertising, or tracking services. The only external connections are:
Figma capture archives are passed to the Figma plugin only when you manually choose the local .cdesign file. The plugin declares no network access.
The Plugin only processes a local .cdesign file that you explicitly select.
networkAccess.allowedDomains: ["none"] and cannot send the selected file or its contents to CloneWebsite or any third party.The Plugin may create an import report containing font substitutions, raster fallbacks, and warnings. That report remains in the Plugin UI for the current run and is not transmitted.
The Extension is not directed at children under 13 and does not knowingly collect any data from children.
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.
If you have questions about this privacy policy, contact us at: support@clonewebsite.app