Docs
Privacy
What Metaspry sends, where it goes and why: the extension runs locally, and cloud sync is opt-in and private to your account.
Last verified against the web app (547aebd) and extension 1.0.27.
The free Chrome extension is local-first. The audit, the previews, the JSON-LD parsing - all happen inside the browser.
What stays on your device
- Every scan you run.
- The 10-entry local history.
- Pinned tags + theme + side-panel/popup mode preference.
- Settings (audit thresholds, rule weights).
Stored via chrome.storage.local. Cleared when you uninstall the extension or clear extension storage.
What goes over the network
Three HTTP fetches per scan, each issued from your browser to the page’s own host:
GET /robots.txtGET /sitemap.xml(and child sitemaps if it’s an index, up to 20)GET /llms.txt
Plus image loads (og:image, twitter:image) when the Audit tab measures dimensions or Previews renders cards.
That’s it. No telemetry, no tracking, no analytics.
metaspry.com itself
The marketing site at metaspry.com (this site) serves its pages, scripts and fonts from its own domain. Loading a page sends nothing to a third party, with one optional exception: GoatCounter, a cookie-free page counter, loads only when PUBLIC_GOATCOUNTER_CODE is set at build time. The website does not set cookies.
Some features do send data, only when you use them:
- Free check (
/check) - unlike the extension, this check runs on Metaspry’s server. The address you enter is sent to a Metaspry Cloud Function (Firebase,europe-west1), which fetches that page and returns the score. If bot protection is enabled for a build, Google reCAPTCHA (Firebase App Check) runs on that page. - Shared scan links (
/s/<id>) - the page reads that snapshot from Metaspry’s Firestore database when the link did not already carry it. - Contact form - your name, email and message are emailed to us through FormSubmit and stored in Metaspry’s Firestore database so nothing gets lost.
- Newsletter form - your email goes to Buttondown (the mailing list) and is also stored in Metaspry’s Firestore database, with a FormSubmit notification to us.
AI crawlers
The extension and the site explicitly allow AI crawlers (GPTBot, ClaudeBot, PerplexityBot) to index metaspry.com. That’s a positioning choice for the site itself - the Chrome extension doesn’t crawl anything and doesn’t expose your scan data to anyone.
With an account
The free extension stays local-first whether or not you have an account. A free account, Pro and Team add opt-in cloud features:
- Cloud history - scans sync to your account so your history follows you across machines. This only happens while you are signed in; sign out and the extension is local-only again.
- Shareable snapshots - any scan can become a public
metaspry.com/s/<id>link. The snapshot carries the scan as it was (URL, title, tags and rule results), with nothing removed; anyone with the link can see it until it expires after 90 days or you revoke it from your Profile. - Bulk audit, scan-a-URL, and drift monitoring - these fetch the URLs you ask Metaspry to audit, the same way a browser would. Results live in your account history.
- Team workspaces - workspace members see the scans and folders shared in that workspace, per their role.
- Offline reading in the web app - Data you have viewed in the web app is kept on this device until you sign out, so the installed app can show it without a connection. Signing out, or signing in with a different account, deletes it from the device first.
Nothing about your scan data is sold, shared with third parties, or used for anything beyond running the feature you asked for.
Questions?
Email hello@metaspry.com with any privacy concerns.