Privacy
Captures never reach us. The extension reads the page in your browser and writes the result to your disk or straight to your own WordPress install. No page content, markup, screenshot or asset is ever sent to a SiteGrab server, because there is no capture service to send it to.
What the control plane stores. Your email and licence key; a random device id per browser you activate; a monthly count of pages captured; and one log line per capture holding the hostname only — never the full URL, never the content. That log is what tells us a licence is being shared across a hundred machines.
WordPress credentials are typed into the panel and used to call your own site directly. The application password is held in memory for the request and is never written to extension storage, never synced and never sent to us.
Third parties. Cloudflare hosts this site and the licence API. Payments, when they launch, are handled by the payment provider; we store only the order reference. There is no analytics script on this site.
Deleting everything. Mail the address on your receipt and we remove the licence, the devices and the event rows. Since captures were never uploaded, there is nothing else to delete.