capruoJoin the waitlist

Privacy policy

Last updated 3 November 2026

Capruo is a Chrome extension and web dashboard for saving web design. This policy explains what we collect, why, where it's kept and how you can see or delete it.

Who we are

Capruo is run from Poland by Capruo, the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to contact@capruo.com.

What we collect and why

If you join the waitlist

We keep your email address, the form you used and when you signed up. We use it only to tell you when your early-access spot opens and about the waitlist launch offer. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to us, and we'll remove your address.

To stop abuse of the form, we also keep a one-way hash of your IP address for about two hours. This rests on our legitimate interest in keeping the service safe (Art. 6(1)(f) GDPR).

If you create an account

Sign-in is handled by Clerk. We receive your email address, and your name and profile picture if you sign in with a provider that shares them. We need this to run your account (Art. 6(1)(b) GDPR, performance of a contract).

What you capture

Your library holds only what you choose to save:

  • screenshots of elements, regions or the visible page, and images you pick;
  • the address and title of the page, and selected text with its font, size and colour;
  • an element's markup and styles when you save it with code, and its Design DNA (colours, fonts, spacing, radius);
  • the tags, notes, sessions and design systems you create, and the search vectors the extension computes on your device.

We store these to show, search and export your library (Art. 6(1)(b) GDPR). Before saving code, the extension removes scripts, form values, editable content and tracking parameters. It never reads passwords, the contents of form fields or a site's cookies.

Technical data

Like any website, our hosting and service providers process your IP address and browser details to deliver pages and keep the service secure. This rests on our legitimate interest in running a safe service (Art. 6(1)(f) GDPR).

On-device AI

Auto-tagging, visual search and More like this run on a model inside the extension, on your computer. Your captures aren't sent to an AI service to be analysed. The model files are downloaded once from Hugging Face the first time you capture, which, like any download, shares your IP address with them. If this ever changes, we'll update this policy first and tell you.

What the extension can access

  • The sites you visit: its code runs on the pages you open so the shortcuts work, but it only reads a page when you start a capture.
  • Tabs and screenshots: to capture the visible part of the current tab.
  • Debugger: only while copying an element as Tailwind, to read its hover and focus styles. Chrome shows a notice while it's attached.
  • Cookies: only Capruo's own sign-in, so the extension and the dashboard share one session.
  • Storage, offscreen and alarms: to keep settings and unsent captures, run the on-device model and retry failed uploads.

Who processes your data

We use a small number of providers, each bound by a data processing agreement:

  • Clerk (Clerk, Inc., USA): accounts and sign-in.
  • Convex (Convex, Inc., USA): the database and file storage that hold your library and the waitlist.
  • Vercel (Vercel Inc., USA): serves this website and the dashboard.

Some of them are in the United States. Transfers rely on the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

We don't sell your data, share it with advertisers or use it for ads. We don't use analytics or advertising cookies today. If we add analytics, we'll update this policy and ask for your consent where the law requires it.

Cookies

The dashboard uses only the cookies needed to keep you signed in. They don't need consent because the service can't work without them.

How long we keep it

  • Waitlist addresses: until you ask us to remove yours, or 12 months after launch at the latest.
  • Captures: until you delete them. Deleting a capture removes it, its files and its code from our database and file storage.
  • Account data: until you ask us to close your account. We then delete your library and account within 30 days.

Your rights

Under the GDPR you can ask us to:

  • give you a copy of your data, or send it to you in a portable format;
  • correct it, or delete it;
  • restrict or object to how we use it;
  • withdraw consent you gave, without affecting what happened before.

Write to contact@capruo.com and we'll answer within one month. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority where you live.

Security

Data travels over HTTPS, and every request to your library is checked against your account, so no one else can read it. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Children

Capruo isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date at the top and, for significant changes, tell you by email or in the app. See also our terms.