Privacy Policy
Last updated: February 12, 2026
Clawfy sends your browsing context only to your own local agent. We never see, store, or sell your browsing data.
What Clawfy is
Clawfy is a Chrome extension that detects tech-relevant content on pages you visit and sends context to your personal OpenClaw agent via a webhook URL you configure. The agent runs locally on your machine (or your own server). Clawfy also offers an optional account system for managing a Pro subscription.
Data we collect
There are two completely separate data flows in Clawfy. It's important to understand both.
1. Browsing context (extension → your agent)
This data never touches our servers. It goes directly from the extension in your browser to your own agent at the webhook URL you configure (typically localhost).
| Data | Free tier | Pro tier |
|---|---|---|
| Page title & meta description | Yes | Yes |
| Heading tags (h1, h2) | Yes | Yes |
| Body text & paragraphs | No | Yes |
| Code blocks | No | Yes |
| Page URL | No | Yes |
| Full page content (Deep Scrape) | No | Yes |
This data is processed entirely within your browser and sent only to the webhook endpoint you configure. We have no access to it. We cannot read, intercept, or log it.
Deep Scrape (Pro) captures a full markdown conversion of the page and instructs your agent to save it to its local filesystem for later recall. This content never leaves your local environment.
2. Account data (your browser → our servers)
If you create a Clawfy account to manage a subscription, we store the following in our database (hosted on Supabase, EU region):
| Data | Purpose |
|---|---|
| Email address | Account identification |
| Name | Display in dashboard |
| Google profile photo URL | Display in dashboard and extension |
| Subscription tier (Free/Pro) | Feature gating |
| API token | Extension authentication |
| Stripe customer ID | Payment management |
We do not store your browsing data, page content, URLs visited, webhook URLs, agent tokens, or any context sent to your agent.
Payment processing
Payments are processed by Stripe. We do not store your credit card number, CVC, or billing address. Stripe handles all payment data under their own privacy policy. We receive only your Stripe customer ID and subscription status via webhooks.
Authentication
Sign-in is handled via Google OAuth through Supabase. We receive your email, name, and profile photo from Google. We do not receive or store your Google password.
Browser permissions
Clawfy requests the following Chrome permissions:
| Permission | Why it's needed |
|---|---|
| activeTab | Read content from the page you're currently viewing |
| storage | Save your preferences, webhook config, and account token locally in Chrome |
| tabs | Detect the success page URL after sign-in to auto-capture your account token |
| sidePanel | Allow opening the extension as a persistent side panel |
| Host permission (all URLs) | Content script needs to run on any page to detect tech signals from metadata |
robots.txt compliance
Clawfy's Deep Scrape feature respects robots.txt directives. If a page disallows scraping, Clawfy will not extract full page content from that page.
Data sharing
We do not sell, rent, trade, or share your data with any third parties. Your browsing context goes only to your own agent. Your account data is used solely for operating the Clawfy service.
Third-party services
Clawfy uses the following third-party services:
| Service | Purpose | Data they receive |
|---|---|---|
| Supabase | Authentication & database | Email, name, profile photo, subscription tier |
| Stripe | Payment processing | Payment details (handled directly by Stripe) |
| Google OAuth | Sign-in | Authentication flow (no password shared with us) |
| Vercel | Website hosting | Standard web server logs |
Data retention
Your account data is retained for as long as your account exists. If you delete your account, all associated data (profile, subscription records) will be removed from our database. Browsing context sent to your agent is not stored by us and is governed by your own agent's configuration.
Your controls
You can pause or disable Clawfy at any time using the toggle in the extension. You can sign out to disconnect your account. You can uninstall the extension to stop all activity. You can request account deletion by contacting us.
Children's privacy
Clawfy is not intended for use by anyone under the age of 13. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of Clawfy after changes constitutes acceptance of the updated policy.
Questions about privacy?
Contact us at support@clawfy.xyz