Back to Home

Privacy Policy

Last updated: 2026-10-15

Introduction

DesignPicker provides local webpage design inspection and optional account services. You can pick colors, identify fonts and inspect CSS without signing in. Signing in enables account authentication and optional synchronization through the DesignPicker service.

Local Inspection and Storage

These inspection tools process the current webpage in your browser:

  • Color extraction and the visible-page screenshot fallback
  • Font identification from computed styles
  • Computed CSS inspection, copying and local snippets

CSS snippets remain in browser-local storage and do not join cloud sync. Saved snippets omit webpage HTML, input contents, original element IDs/classes and resource URLs. Page inspection does not upload raw page HTML or screenshots to our service. Saved records can be managed in the extension Favorites page.

Optional Account and Sync Data

When you use an account, we process the data needed to authenticate you and provide your saved collections:

  • Account identifier, email address and profile information provided by the sign-in provider; session credentials are used for authentication and refresh.
  • Saved color values, font records and supported preferences are transmitted to the DesignPicker service when you synchronize. CSS snippets and the per-browser auto-sync switch are excluded.
  • Local account snapshots and pending jobs support separate account collections and retry failed synchronization. Turning off auto-sync stops automatic uploads; manual sync remains available. It does not delete previously synced data. We do not collect browsing-history lists or record page clicks, keystrokes or mouse movements for analytics in the extension.

Extension Permissions

Permissions support the inspection tools and optional account services:

  • activeTab and scripting provide access to the active webpage and packaged inspection scripts. Content-script matching supports inspection on regular webpages.
  • storage saves preferences, collections, CSS snippets and account state locally. alarms resumes pending auto-sync jobs after the background worker restarts. Access to the DesignPicker API host supports sign-in, session refresh and authenticated synchronization.

Pro Workspaces and Payments

Webpage references are first captured locally. When you request Pro previews, similar palettes or exports, the selected style fields are sent to the DesignPicker server for processing. These include colors, typography, layout values, source hostname and capture time, not page text, form values, full URLs, HTML, screenshots or font files. Schemes upload only when you choose cloud save/upload and are stored in your account with Supabase. Creem processes checkout and payment details; DesignPicker stores account-linked order identifiers, product, amount, currency, payment status and access records. Card details are entered on the payment provider checkout and are not stored by the extension. Data from extension APIs is used only to provide the described user-facing design and account features, in accordance with the Chrome Web Store User Data Policy, including its Limited Use requirements.

Service Providers and Website Analytics

Account authentication and cloud storage use Supabase and the sign-in provider selected during login. The public website also loads Google Analytics, Microsoft Clarity and Google AdSense when configured in production; these services may process website interactions, technical identifiers and cookies under their own privacy policies. These website scripts are separate from the extension inspection tools. We do not sell extension account or saved collection data, or use it for unrelated advertising or credit decisions.

Updates and Changes

We may update this policy when features or data practices change. The latest version and update date are published on this page.

Contact Us

For privacy questions or account/cloud-data deletion requests, contact hi@yisi.app. Uninstalling the extension removes its browser-local storage but does not itself delete account data stored by the service.