Privacy

ScriptPanda is a Chrome extension that writes userscripts for the page you're looking at. This page explains what leaves your browser, what doesn't, and why.

What we collect

Your account. Your email address, your name if you give one, and a password hash. If you sign in with Google we receive your email, name and profile image from Google.

What you ask for. When you send a request in the side panel, we receive the text of your request, the address of the page you're on, and a trimmed text outline of that page's structure.

How much you use it. A count of requests per month, so we can apply your plan's monthly allowance.

A tool asking while it runs. This is different from the request above: it's triggered by a tool running, not by you typing something. If you've approved a tool that uses AI, it can send text from the page to us on its own, whenever it runs — whatever text it's built to send. We don't automatically attach the page's address to this; a tool would only send it if it were built to include it. This only happens for tools you've approved, and you can withdraw that approval any time from the extension's manage page.

What the page outline contains

To write a script that works, ScriptPanda needs to know how the page is built. It sends a stripped-down outline: element names, structure, and short snippets of visible text, capped in size. Scripts, styles, embedded frames and images are removed before it is sent.

It is not a screenshot and it is not the full page, but it can include visible text from the page you're on. Don't use ScriptPanda on a page showing something you wouldn't want to send us— a bank statement, medical records, private messages. If you've approved a tool that uses AI while it runs, this isn't just a rule for the moment you send a request: it applies on every page that tool matches, for as long as your approval stands.

Where it goes

Your request and the page outline are sent to our servers, and from there to Anthropic, whose model writes the script. Anthropic processes it to generate the response. We do not sell your data, and we do not use it to advertise to you.

What stays on your computer

The scripts ScriptPanda writes are stored in your browser, in the extension's local storage. They are not uploaded, and we cannot read them. If you uninstall the extension or clear its data, they are gone.

What we don't collect on our own

• Your browsing history. We only see the address of a page when you send a request from it.
• Anything from a page, unless you send a request from it, or you've approved a tool that's running on it.
• We never ask for or design a tool to collect passwords. A tool you approve still sends whatever text it's built to send, from wherever you point it — a rewrite or classify tool pointed at a text field sends exactly what you typed there, so don't point one at a password field. No other tool sees it, and nothing leaves unless you approved that specific tool for that task.

Deleting your account

Email support@scriptpanda.xyzand we'll delete your account and everything attached to it.

Changes

If this policy changes we'll update the date at the top of this page.

Contact

Questions about any of this: support@scriptpanda.xyz.