Privacy policy
Last updated 19 August 2026
MapScraper extracts business information that is already published publicly on Google Maps and Bing Maps. This page explains what we store about you, what happens to the data you extract, and what the browser extension does and does not send us.
Who we are
MapScraper ("we") operates mapscraper.io and the MapScraper browser extension for Chrome and Edge. For privacy questions, write to privacy@mapscraper.io.
What we collect about you
| Data | Why | Kept for |
|---|---|---|
| Email address | It is your account identifier and how sign-in links reach you | Until you delete the account |
| Name and avatar (Google sign-in only) | Shown in the dashboard | Until you delete the account |
| Session records (token, IP, user agent, timestamps) | Keeping you signed in and detecting abuse | 30 days after the session ends |
| Search terms, job records, lead balance and ledger | Running your scans and showing what was used | Until you delete the job or the account |
| Rate-limit counters keyed to your IP | Stopping automated abuse of the public demo | At most one hour |
We do not collect passwords, because there are none — sign-in is a one-time link or Google OAuth. We do not run third-party advertising or analytics trackers.
The browser extension
The extension reads the Maps results page you already have open, in your own browser session and over your own connection. Extracted rows stay in the browser until you export them or explicitly hand the scan to the cloud.
Its permissions are deliberately narrow:
activeTaband host access limited togoogle.com/mapsandbing.com/maps— it cannot read any other site.storage— caches the selector configuration and your last run locally.sidePanel— draws the interface beside the page.
The extension sends us one thing on its own: breakage telemetry. When it parses fewer rows than expected it reports the pack version, which fields failed, the browser, the extension version and the Maps interface language. It contains no business data, no URLs and no personal data, and it is what makes the 24-hour repair guarantee possible.
The data you extract
Business names, addresses, phone numbers, websites and public review information belong to the businesses concerned, not to us. Where you run a cloud scan we store those rows so you can export them; you can delete a job at any time, which deletes its rows.
How you use extracted data is your responsibility. A business phone number or email can still be personal data under the GDPR, the UK GDPR, Turkey's KVKK and similar laws. If you send marketing to it you are the data controller for that processing: the lawful basis, the disclosure notice, the opt-out and any local rules on unsolicited contact are yours to meet. Nothing here is legal advice.
Who else touches the data
- Hosting and database providers, to run the service.
- A payment processor, when you pay. Card details never reach our servers.
- An email provider, to deliver sign-in links.
We do not sell personal data and we do not share it for advertising.
Your rights
You can request access, correction, export or deletion of your personal data at privacy@mapscraper.io. Deleting your account removes your profile, sessions, jobs and stored leads. We answer within 30 days.
Cookies
One cookie, holding your session so you stay signed in. There are no advertising or analytics cookies, so there is no consent banner to click past.
Changes
If this policy changes materially we will say so on this page and, for account holders, by email before the change takes effect.