Privacy Policy — Wantly Browser Extension
Effective date: 2026-05-26
Last updated: 2026-05-26
This Privacy Policy describes how Wantly, UAB (“we”, “us”, “our”) handles information when you use the Wantly Chrome browser extension (the “Extension”).
The Extension helps you import product information from web pages into your Wantly commercial proposal system.
Contact:support@wantly.eu
Website:https://wantly.io
1. Scope
This policy applies to the Extension only. It does not replace the privacy policy for your Wantly workspace or main website unless we state otherwise. When you use the Extension with your Wantly account, data may also be processed under your workspace terms and our main privacy policy at https://wantly.io/terms-of-service.
2. Summary
- The Extension works only when you use it (Connect, Scrape/Import, Open Products, Disconnect).
- We do not sell your data.
- We do not load or run code from remote servers inside the Extension; all Extension code is packaged in the install bundle.
- When you scrape/import a page, page content and URL are sent to your configured Wantly workspace (the server URL you enter).
- Some connection details are stored locally in your browser until you disconnect.
3. Information we process
3.1 Information you provide
| Data | When | Purpose |
|---|---|---|
| Workspace URL | When you click Connect | To identify your Wantly tenant/server (e.g. https://your-company.wantly.eu) |
| User-initiated import | When you click Scrape/Import | You choose which page to send |
3.2 Information collected automatically (on your device)
| Data | When | Purpose |
|---|---|---|
| Open tab URLs | When you open the Extension popup (Connect screen) | To detect an open Wantly tab (*.wantly.eu) and prefill the workspace URL. These URLs are compared locally and are not sent to us solely for this feature. |
| Active tab URL and HTML | When you click Scrape/Import | To send product/page data to your Wantly workspace |
| Connection identifiers | After successful Connect | Stored locally: workspace URL, user/session id, and a pairing token |
3.3 Information sent to your Wantly server
When you connect or import, the Extension sends data to your workspace origin (the URL you entered), for example:
- Connect (/lockext): pairing token
- Import (/extcrape): user/session id, pairing token, page URL, full page HTML
Processing on the server (storage, retention, access) is governed by your Wantly workspace and our backend policies.
3.4 Information we do not collect through the Extension
We do not intentionally collect through the Extension:
- Browsing history in bulk
- Passwords or payment card data
- Data from tabs you do not actively import
- Data for advertising or profiling
Page HTML you import may incidentally contain personal or sensitive information if it appears on the page you choose to import. Only import pages you are allowed to process.
4. How we use information
We use the information above only to:
- Link the Extension to your Wantly workspace
- Import product/page content you explicitly request
- Open your workspace Products page when you click that button
- Show connection status in the Extension popup
- Operate, secure, and troubleshoot the Extension
We do not use Extension data for unrelated advertising or sale to third parties.
5. Local storage in your browser
After you connect, the Extension stores the following in chrome.storage.local on your device:
- Workspace URL (
systemUrl) - User/session identifier (
userId) - Pairing token (
extpass)
This keeps you connected between popup sessions. When you click Disconnect, this local data is cleared.
You can also remove Extension data by uninstalling the Extension or clearing Extension storage in Chrome settings.
6. Legal bases (EEA/UK users)
Where GDPR applies, we rely on:
- Performance of a contract / service: providing the Extension and import feature you request
- Legitimate interests: securing the Extension, preventing misuse, and improving reliability (balanced against your rights)
- Consent: where required for optional processing; core import requires your explicit action (clicking Scrape/Import)
7. Sharing and recipients
| Recipient | Why |
|---|---|
| Your Wantly workspace server | Connect and import, as configured by you |
| Google Chrome | Extension distribution and updates via Chrome Web Store (subject to Google’s policies) |
We do not sell Extension data. We may disclose information if required by law or to protect rights, security, and safety.
If we use subprocessors for hosting Wantly (e.g. cloud provider), they process data only on our instructions and under appropriate agreements.
8. International transfers
If you are in the EEA/UK and data is processed outside your country, we use appropriate safeguards where required (e.g. Standard Contractual Clauses).
9. Retention
| Location | Retention |
|---|---|
| Browser (local storage) | Until you click Disconnect, uninstall the Extension, or clear Extension data |
| Wantly servers | As long as needed to provide the import/proposal service and as stated in https://wantly.io/terms-of-service |
10. Security
We use reasonable technical and organizational measures to protect data in transit (HTTPS where supported) and on our systems. No method of transmission or storage is 100% secure.
You are responsible for:
- Keeping your Wantly account credentials secure
- Only connecting to workspaces you trust
- Not importing pages containing data you should not share
11. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, object, or port your personal data, and to withdraw consent where processing is consent-based.
To exercise rights relating to data on Wantly servers, contact us at support@wantly.eu.
For local Extension data, use Disconnect in the Extension or uninstall it.
You may lodge a complaint with your local data protection authority. In Lithuania: Valstybinė duomenų apsaugos inspekcija (VDAI).
12. Children
The Extension is not directed at children under 16 (or the age required in your jurisdiction). We do not knowingly collect children’s data through the Extension.
13. Changes
We may update this policy. We will post the new version at https://wantly.io/browser-extension-privacy and update the “Last updated” date. Material changes may be communicated via the Chrome Web Store listing or your workspace.
14. Chrome Web Store disclosure
For transparency in the Chrome Web Store, the Extension:
- Uses storage to save connection details locally
- Uses tabs to read tab URLs locally for optional Wantly workspace autofill
- Uses activeTab and scripting only when you interact with the popup to read the active page
- Uses host permissions to communicate with the workspace URL you provide
- Does not execute remote code; network requests send data only, not executable scripts
15. Contact
Wantly, UAB
Email:support@wantly.eu
