Privacy at Scraper.io

Scraper.io is operated by Isaac Herring in the United Kingdom. Isaac Herring is the controller responsible for customer, account, website and order information described in this notice. Contact privacy@scraper.io about your information or hello@scraper.io for general enquiries.

This notice covers scraper.io, its request and checkout flows, customer workspace, delivered datasets and support. Customers who receive a dataset are responsible for their own subsequent use of it.

We receive the information you provide: request messages, requested fields and sources, sample feedback, delivery email, order details and support correspondence. If you use an account, we also handle account and sign-in information. Request conversations, quotes and order progress are recorded so we can scope, fulfil and support your job.

Stripe processes payment details on its checkout. We retain the payment reference, status, amount, currency and delivery details needed to confirm and support your order; our application does not receive your full card number or card security code.

Hosting and authentication services process technical information such as IP addresses, request and error logs, and security identifiers to operate the site. Optional analytics uses the separate choices described below. Do not put passwords, payment credentials, sensitive personal information or confidential material you are not authorised to share into a request.

To prepare samples and fulfil a request, we search and read public websites relevant to the requested businesses, products or market. Results can include business names, websites, public business contact details and the requested source observations. Source links accompany sample records where available. Contact us with the record or source URL if information about you needs correction or removal review.

Anthropic processes request text and conversation context to help scope a job and find or extract sample records. Firecrawl reads requested public pages; Exa supports search and dataset features. Queries, requested fields and relevant source content are shared with those providers when those features are used. AI output can be wrong; it is not used to make legal or similarly significant decisions about individuals. Paid dataset fulfilment includes operational review.

We use delivery details, requests and payment information to take steps at your request before a contract and to provide the service you order. We need a delivery email and sufficient job details to deliver a paid dataset; optional analytics and marketing are not conditions of purchase.

We use operational records and public business research for our legitimate interests in answering enquiries, producing relevant datasets, maintaining service security, resolving problems and preventing abuse. We retain information needed to meet applicable accounting and legal obligations. You can object to processing based on legitimate interests by contacting privacy@scraper.io.

We rely on your consent for optional analytics, ad attribution and product-news email. The checkout email-marketing choice is separate and unchecked by default. You can withdraw measurement consent through Privacy choices and withdraw email-marketing consent by contacting us or using an unsubscribe option in a marketing message. Withdrawal does not affect processing that took place before it.

Vercel hosts the website and server functions. Supabase stores account, request and order records and delivery files. Stripe handles checkout and payment processing. Resend sends transactional emails such as order confirmations and delivery messages. Anthropic, Firecrawl and Exa support the research features described above.

Slack receives operational request conversations and order notifications, including relevant request text, delivery email and order details, so the operator can respond and fulfil jobs. These service communications are distinct from optional PostHog and Google Analytics measurement, which excludes that private content.

With your measurement choices, PostHog provides usage and conversion analysis and Google Analytics provides visit-to-order measurement; Google Ads can receive consented campaign attribution. Provider roles and the data they receive depend on the feature used. We may also disclose relevant records where required by law or to handle a dispute.

Providers may process information outside the UK, including in the United States. PostHog analytics is configured in its US region. Contact privacy@scraper.io for information about the providers, processing locations and applicable transfer arrangements for your data. This notice does not claim that all information stays in the UK.

We keep request, order, delivery and support records while needed to provide access to your job, fulfil ongoing work, handle corrections or refunds, resolve disputes and meet accounting or other legal requirements. Retention depends on the type of record, whether the job or dispute remains open, and the applicable obligation. The current service does not automatically erase all order or conversation records after a fixed number of days.

You can request deletion or a copy of your information at privacy@scraper.io. We assess the records involved and explain any information we need to retain and why. Removing optional measurement consent stops future measurement for that browser and its associated orders; it does not automatically erase events already received by providers or records needed to deliver your purchase.

The optional measurement choice and browser identifiers last up to 180 days, as described below. Essential buyer sign-in sessions last up to 30 days; an order-access cookie can last up to one year. Checkout drafts use browser session storage. Provider logs, backups and analytics records have separate retention settings and may remain after browser storage is cleared.

You can ask to access, correct or erase personal information, restrict its use, or receive a portable copy where the relevant right applies. You can object to processing based on legitimate interests and to direct marketing. You can withdraw consent at any time without losing access to the core request and checkout service.

Email privacy@scraper.io with enough information to locate the relevant record, such as an order reference or source URL. We may need proportionate verification before disclosing or changing personal information. We respond within the period required by applicable law and explain any exception or extension.

You can complain to the UK Information Commissioner's Office (ICO) or the relevant supervisory authority where you live. You do not have to contact us first, although we welcome the opportunity to resolve a concern.

Order access uses signed buyer sessions or order-access credentials, and administrative actions require authentication. Payment and other service credentials are kept on the server. Keep order and sign-in links private: they can grant access to your job.

Report a security concern to security@scraper.io. Include enough information to reproduce the issue without sending unrelated personal information. No online service can guarantee absolute security.

Optional measurement is off by default. Privacy choices lets you reject it, allow analytics only, or allow analytics, ad attribution and Meta retargeting. This choice is separate from product-news email consent at checkout and can be changed at any time using the Privacy choices button.

With analytics consent, PostHog and Google Analytics receive events for visits, submitted requests, usable samples and quotes, checkout, confirmed live payments, delivery and downloads. Events use random browser and session identifiers, campaign identifiers where provided, an order reference, payment value and currency. They exclude your request text, email address, name, dataset rows and order-access tokens, including hashed versions of those customer details. Page addresses are restricted to safe paths and allowed campaign parameters. We do not enable session recording, automatic form capture or automatic search capture.

Google Analytics associates your visit information with completed orders, payment value, delivery and download events through the random browser and session identifiers. Its browser tag receives technical browser information and your network connection information when it loads after consent. With separate Analytics + ads consent, supported Google click identifiers are shared to measure which advertising clicks led to an order and attribute conversions in Google Ads. Google advertising personalization, Google Signals and Google user-provided-data features are disabled by this integration.

With explicit consent to advertising and Meta retargeting, our Meta Pixel sends PageView events with a restricted page address to Meta Platforms so we can build website-visitor audiences and show Scraper.io ads on Facebook and Instagram. Meta also receives your IP address and technical browser information through the connection, and may associate the visit with existing Meta cookies or your Meta account, depending on your browser and Meta settings. This integration uses an image pixel, does not load Meta’s JavaScript SDK, and does not send prompts, email addresses, names, query strings, order-access tokens, dataset content or purchase events. Automatic advanced matching and automatic event capture are not used. Browser restrictions may prevent matching or delivery.

The scraper_meta_consent cookie records your choice for the Meta retargeting purpose for up to 180 days. Earlier consent to ad attribution alone does not enable Meta retargeting; a new advertising choice is required. Rejecting optional tracking or choosing analytics only stops future Meta events. Requests already sent cannot be recalled, and Meta may retain previously collected information under its own privacy and cookie policies.

The scraper_measurement_consent cookie remembers your choice for 180 days. Optional Google Analytics cookies (_ga and _ga_*) last up to 180 days. Optional local storage scraper.measurement.v1 retains random identifiers and original campaign attribution for that consent period. With ad-measurement consent, supported Google click identifiers are retained through checkout.

Reject optional withdraws measurement consent, removes this integration's optional browser identifiers and stops new events for this browser and orders associated with its identifier. Choosing Analytics only withdraws ad attribution and Meta retargeting while retaining analytics. Previously collected events are not automatically deleted; contact privacy@scraper.io for a deletion request. Essential login, security and order-access storage continue to work regardless of optional choices.

This notice was updated on 29 September 2026 to describe the current checkout, service providers and optional measurement. We update it when our processing changes. New optional measurement purposes require an appropriate choice before collection begins.