Privacy

Privacy Policy

Last updated 26 June 2026

The short version: CommentGrab runs entirely inside your browser. There is no backend, no account, and no analytics. We never receive, store, or sell your data — including your OpenAI API key, which lives only on your device.

01Who we are

CommentGrab is an open-source Chrome extension that exports public comments and reviews and turns them into customer-language insight. It is an independent project, not affiliated with, endorsed by, or sponsored by Reddit, YouTube, Amazon, Steam, Trustpilot, Product Hunt, Etsy, Quora, OpenAI, or Google.

02What we collect

Nothing. CommentGrab has no servers and no backend. We do not operate analytics, telemetry, cookies, accounts, or logging of any kind. We have no way to see who you are or how you use the extension.

03What's stored, and where

Everything CommentGrab needs is stored locally on your device using the browser's chrome.storage.local API. This data never leaves your machine except as described in section 4. It includes:

  • Your saved collections — comment and review threads you choose to keep.
  • Your scrape history — a record of captures you've run, so you can re-open them.
  • Your stats — local counts of comments captured, scrapes, and exports.
  • Your settings — export defaults, widget options, and your OpenAI API key, which you provide in settings.

Uninstalling the extension, or clearing it via chrome://extensions, removes this data.

04Network requests & your API key

CommentGrab makes requests directly from your browser to:

  • The page you're scraping — comments and reviews are read from the site you're on, or fetched from that platform's public API (e.g. Reddit, Hacker News, Steam) by the extension's background worker. This data stays on your device.
  • OpenAI's API (api.openai.com) — only when you trigger an analysis. A sample of the comments you're analyzing, plus your OpenAI API key, are sent to OpenAI to generate insights. This traffic goes to OpenAI, never to us, and is governed by OpenAI's privacy policy. You pay OpenAI directly for usage.

Your API key is used only to authenticate with OpenAI. It is never transmitted to CommentGrab, the developer, or any third party.

05Browser permissions

The extension requests the minimum permissions it needs to function:

  • storage — to save your collections, history, stats, settings, and key locally.
  • Host access to the supported sites you scrape and to api.openai.com — to read comments and run analyses, as described in section 4.

CommentGrab only reads the content of a page when you ask it to capture that page.

06Children

CommentGrab is a general-audience productivity tool and is not directed to children under 13. We do not knowingly collect data from anyone — children included — because we do not collect data at all.

07Changes to this policy

If this policy changes, the updated version will be posted on this page with a new “last updated” date. Material changes will also be noted in the changelog.

08Contact

Questions about privacy? Open an issue on GitHub or email [email protected].