Privacy policy

Last updated: September 19, 2026 · Applies to FullPage Capture v1.19.56 and later

The short version: your captures stay on your device, and neither the extension nor this website uses analytics or ads. We hold data about you only when you use something that needs it: an account, a Pro purchase, a report or message you send, the survey page that opens when you uninstall, or an upload to your own Google Drive. Payments are processed by Stripe, and your card details never reach our servers. We never sell your data.

Who we are

FullPage Capture and FullPage Capture Pro are made and sold by Media Edge LLC, a company registered in Sharjah, United Arab Emirates.

Registered address: Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, United Arab Emirates
Privacy contact: info@fullpagecapture.net, or the contact form

Media Edge LLC is the controller of the personal data described on this page. That means we decide why and how it is used.

The extension: what stays on your device

Captures. The images, the page address and title, and your edits. They are kept in your browser's local database (IndexedDB), deleted when you delete them, and removed when you uninstall the extension.
Settings. Kept in the browser's local extension storage.
Recent pages. The full addresses of the last pages (up to five) on which you opened the extension. The list is used by the uninstall survey and by reports sent from Settings, described below.
Your account, if you sign in. The account email, this browser's token, a random id and name for this browser, and the last Pro status the server gave.
The review prompt. Whether and when the extension asked you to rate it. This is kept in the browser's sync storage, so it follows your browser profile if you use browser sync.

The extension has no analytics, telemetry or crash reporting. Capturing, editing and exporting work offline. Files you download go to your Downloads folder like any other download. The verify page checks a file inside your browser; the file is not uploaded.

The extension: what it sends, and when

Account check. Once you are signed in, the extension asks our server about every three days, and at most once an hour when Pro looks expired, whether Pro is on for this browser. The request carries this browser's token and nothing else. When you sign in, the extension also passes a random id for this browser and its name (for example "Chrome on macOS").
Our website. On https://fullpagecapture.net only, a small script in the extension passes the sign-in between the site and the extension: this browser's id and name, the account email, a token, and when you last signed out here. It reads nothing else on those pages.
Google Drive. Only if you connect it (Pro). Files go straight from your browser to Google, as described below.
Report an issue. Only when you press Send.
Uninstall survey. When you uninstall, the browser opens our survey page. Its address carries the extension version and the recent pages list, and the page records them as soon as it opens. The page says so at the top.

Nothing else leaves your device. Your captures, the content of the pages you capture and your settings are never sent to our servers.

Accounts

You do not need an account for the free extension. You need one for Pro. You can sign in with Google or with a link sent to your email. Sign-in is handled by Firebase Authentication, a Google service. It stores your email address and, for Google sign-in, the name and picture Google shares. We use the email.

If you buy Pro without signing in, we create an account for the email you pay with, once Stripe confirms the payment.

For each account we keep:

the email address, and when and how the account was created (sign-in or purchase);
your Pro status: plan, dates, currency and yearly price;
whether the Pro trial has been used. There is one trial per account, so this stays recorded even after a refund;
the purchase records listed in the next section.

You need to give an email address to have an account or buy Pro; without it we cannot provide Pro. The other records described here are created as you use the service.

One account works in up to 5 browsers. For each browser we keep the random id the extension created, the browser's name, a one-way hash of its token, and when it was added and last seen. Signing out in the extension, or disconnecting that browser on your account page, deletes the record.

FullPage Capture Pro: payments

Payments are processed by Stripe. The email, card and wallet fields in the checkout are Stripe's own fields, loaded from Stripe. Your card details go directly to Stripe and never reach our servers. Stripe handles them under Stripe's privacy policy. If you pay with Apple Pay, Google Pay or Link, that service also handles the payment under its own terms and privacy policy.

Stripe sends receipts and other billing emails on our behalf. Changing your card and viewing invoices happen on Stripe's billing page, which you open from your account page.

What we keep about a purchase

Stripe's ids for your customer record, subscription, invoices and payments.
Amounts, currency, payment dates, the period each payment covers, and the subscription's status and dates (trial, active, cancelled, ended).
Refunds, card disputes and card-network fraud warnings on your payments.
A one-way hash of the card fingerprint Stripe gives us. It is not your card number and cannot be turned back into it. We keep it to help prevent fraud.
If you cancel: the reasons you picked and any comment you wrote. They are also passed to Stripe with the cancellation.
The order record that connects the paying browser to your account, including the email you paid with.

Checkout and fraud prevention

Your country, looked up from your IP address, picks the currency of the price you see and pay. The checkout record keeps the country and a salted one-way hash of the IP address, never the address itself. It is deleted automatically after 30 days.
The email you type before paying is checked against existing accounts, so we can ask you to sign in first or tell you the trial was already used. The last email checked stays with that checkout record for the same 30 days.
Request limits. To stop abuse such as card testing, we count requests per hashed IP address, account or order. The counters are deleted automatically, within about a day.
Pay on your phone. The hand-off between your computer and your phone is deleted after 30 minutes.
Stripe's script runs on the checkout pages: /pro/, /pro/phone/, and the checkout window inside the extension, which shows the same page. To prevent fraud it collects information about your device, browser and connection, including your IP address. It may show an hCaptcha check and sets Stripe cookies. Stripe explains this in its privacy policy and its cookie policy.

Some checks run automatically. A repeat trial or a duplicate purchase is cancelled and fully refunded. A trial payment that a card network reports as fraudulent is refunded and the subscription cancelled. If you think one of these was a mistake, write to us.

Google Drive (Pro)

If you turn on Send to your cloud and connect Google Drive, Chrome asks Google for one permission: drive.file. It lets the extension see and change only the files it created in your Drive. It cannot see anything else there.

Uploads go straight from your browser to Google. Our servers never see the access token or the files. On your device the extension keeps the email of the connected Drive account and the id of the folder it made. Settings also shows that account's name and storage use, read from Google.

If you choose to share a capture, the extension makes that one file readable by anyone who has its link. Disconnecting Drive in Settings revokes the extension's access with Google.

FullPage Capture's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Reports, messages and the uninstall survey

These are stored in a private Google Sheet that only we read.

Report an issue (sent only when you press Send): what you typed; the address of the page you were capturing, or, from Settings, the recent pages list; the extension version; browser and operating system; browser language and time zone, and a region guess made from them; and the country and city looked up from your IP address.
Contact form: your message; your name and email if you give them; browser and operating system; language and time zone, and a region guess made from them; and the country and city looked up from your IP address.
Uninstall survey: as soon as the page opens it records the recent pages list (up to five full addresses), the extension version, browser and operating system, language and time zone, a region guess made from them, the country and city looked up from your IP address, and a random session id. This happens even if you type nothing. If you write feedback and press Send, a second record holds your answer.

We use these only to answer you, fix bugs and improve the extension. We never share or sell them. The IP address itself is not stored.

This website

No analytics, no ads, no tracking pixels and no external fonts. The site sets no cookies of its own.
It uses your browser's storage for: a note that the extension is installed; the email you typed for an email-link sign-in, removed once the sign-in completes; your sign-in session, until you sign out; and, for one tab only, the checkout's order token and a secret that connects the paying browser to the order.
Other cookies: Stripe's, on the checkout pages (see above), and Google's, in the Google sign-in window.
Netlify hosts the site and runs our server functions. Like any host, it processes your IP address and request details, and keeps logs for at least 24 hours, under Netlify's own retention policy.

Why we use your data

To provide the service you asked for (your account, Pro, your browsers, payments, cancellations and refunds): this is necessary for our contract with you.
To keep accounting and tax records: a legal obligation.
To prevent fraud and abuse, keep the service secure and handle disputes (hashed IP addresses, the card fingerprint hash, request limits, Stripe's fraud checks, one trial per account, duplicate purchases): our legitimate interests.
To learn why people uninstall, from the survey page's automatic record: our legitimate interest in improving the extension.
Google Drive, reports and contact messages: your choice to use them. You can disconnect Drive at any time, or ask us to delete a report or message.

We do not sell personal data and do not use it for advertising.

Who else handles your data

Stripe: payments, fraud prevention, receipts and billing emails, and the billing page. For its own fraud-prevention and Link data, Stripe decides how the data is used, under its privacy policy.
Google Firebase and Google Cloud: sign-in and our database. Database location: nam5.
Google Workspace (Google Sheets): reports, uninstall survey records and contact messages.
Netlify: website hosting, server functions, the country lookup from your IP address, request limits and logs.
Google, when you sign in with Google or connect Google Drive, under Google's own privacy policy.
Apple Pay, Google Pay and Link, if you pay with them, under their own terms.
Authorities, courts and professional advisers, when the law requires it or to defend a legal claim such as a card dispute.

International transfers

Media Edge LLC is based in the United Arab Emirates. Our providers process data in the United States and in other countries. When your data moves to another country, we rely on the safeguards the law provides, such as standard contractual clauses or the EU-U.S. Data Privacy Framework where a provider uses them. You can ask us for details.

How long we keep it

Checkout records (country, hashed IP address, the email checked): 30 days.
Pay on your phone hand-offs: 30 minutes.
Short locks that stop one order being processed twice: 1 day.
Request-limit counters: from ten minutes to about a day.
Records of Stripe notifications (their ids and types, no payment details): 35 days.
A browser's record: until you sign out there or disconnect it.
Your account and the one-trial record: deleted within 30 days of closing the account, apart from what the law requires us to keep.
Billing records (payments, refunds, disputes, cancellations, orders, and a one-way hash of the email while an account is created for a purchase): 5 years, as tax law requires.
Reports, uninstall survey records and contact messages: 12 months.
Captures and extension settings: on your device, until you delete them or uninstall the extension.
Stripe keeps its own records under its own policy.

Your rights and choices

You can do these yourself at any time:

cancel Pro, or disconnect a browser, on your account page;
change your card and see invoices on Stripe's billing page, from your account page;
sign out in the extension or on this site;
delete captures in the extension, or uninstall it to remove everything it stored;
disconnect Google Drive in the extension's Settings.

You can also ask us to give you a copy of your data, correct it, delete your account and its data, restrict or object to a use of it, send it to you in a portable format, or withdraw a consent you gave. Write to info@fullpagecapture.net or use the contact form, from your account's email address. We may ask you to confirm that the account is yours. We answer within one month.

When we delete an account, we still keep the billing records the law requires, and Stripe keeps its own. If you are in the EU, the UK or another country with a data protection authority, you can complain to it. We would welcome the chance to help first.

Security

Our site and server are reached only over HTTPS. We store one-way hashes instead of IP addresses, device tokens and card fingerprints. Card details go straight to Stripe and never pass through our servers. Stripe is certified as a PCI Service Provider Level 1, the highest level of card-industry security certification.

Children

FullPage Capture is not meant for children. We do not knowingly collect data from children under 16. If you think a child has given us data, write to us and we will delete it.

Permissions, explained

activeTab, scripting: to capture the tab you clicked on.
storage, unlimitedStorage: to keep your captures and settings on your device; full-page screenshots can be large.
webNavigation: to find the embedded frames of a page when you choose to capture a frame, and to notice when a page fails to load during batch capture (Pro).
contextMenus: to add a "Your captures" item when you right-click the extension's toolbar icon.
identity: to connect Google Drive through your browser's own Google sign-in (Pro). It is used only when you connect Drive.
downloads (optional): requested only if you choose a custom Downloads subfolder.
Site access (all sites): to run the capture script on the page you capture, including frames inside it and the pages you list for batch capture (Pro), and, on https://fullpagecapture.net only, to connect the extension to your account. Page content is never sent to our servers.

Changes to this policy

We update this page before a change takes effect, and the date at the top says when it last changed. If a change affects how we use data you have already given us, we will announce it clearly in the extension before it applies.

Contact

Media Edge LLC, Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, United Arab Emirates, Sharjah, United Arab Emirates. Questions about privacy: info@fullpagecapture.net, or the contact form.