Who we are
Prospekt is a browser extension built and maintained by UrsaCode, a distributed software collective. In this policy, "we" and "us" mean UrsaCode, and "you" means the person using the extension.
You can reach us at contact@ursacode.com.
What Prospekt does
Prospekt reads the text of web pages you visit and extracts contact details that match your configured patterns — email addresses, phone numbers, social profile links, and any custom patterns you define. It records which page each result came from, and lets you review, filter and export the results as CSV.
What we collect
Nothing. We operate no server, no API and no data store connected to the extension. There is no mechanism in Prospekt by which your data could reach us, because there is nowhere for it to be sent.
Specifically, we do not collect analytics, telemetry, crash reports, usage statistics, identifiers, IP addresses or the contents of any page you visit.
What Prospekt stores, and where
All of the following is written to your browser's local extension storage
(chrome.storage.local) on your own device:
| Data | What it is |
|---|---|
| Extracted contacts | Email addresses, phone numbers, social profile URLs and custom pattern matches found on pages you visited. |
| Source attribution | For each contact: the domain, page URL, page title and the date it was first and last seen. |
| Scan records | Which domains have been scanned, how many pages, and how many contacts each produced. |
| Settings | Your regex patterns, filter lists, storage limits and toggles. |
This data is readable only by the extension, within your browser profile. It is not synced to a Google account, not backed up by us, and not shared with any third party.
Page content
To find contacts, Prospekt must read the text of the page you have open. This happens entirely in memory, on your device, at the moment the page loads. The page text itself is never stored and never transmitted — only the matches your patterns produce are kept.
Pages on your skip list are never read at all. The default skip list already excludes common mail, document and messaging domains.
Network requests
Prospekt makes no network requests in normal operation. There is exactly one optional exception:
- Remote favicons — if you switch this on in Settings, the extension requests the site icon for domains in your collection. Doing so reveals to those sites that a request originated from your browser. It is off by default for that reason, and the extension works fully without it.
Permissions and why they exist
| Permission | Why |
|---|---|
| storage | To save contacts, scan records and your settings locally. This is the extension's only persistence layer. |
| scripting / activeTab | To read the visible text of the page so your patterns can be run against it. Page content is never modified. |
| tabs | To read the current tab's URL and title, so each contact can be attributed to its source page and the skip list can be applied. |
| host permissions | Contacts appear on arbitrary websites, so the extension cannot know in advance which hosts you will need. It only reads pages you actively open, and you can exclude any domain. |
Third parties
There are none. Prospekt contains no advertising, no third-party SDKs, no trackers and no remotely loaded code. All code is bundled in the extension package and reviewable in the public source.
Retention and deletion
Your data stays on your device until you remove it. You are always in control:
- Delete a single contact or scan record from the dashboard.
- Select many at once and delete them in bulk.
- Use Settings → Danger zone → Clear everything to permanently remove all contacts and scan history.
- Uninstalling the extension removes all of its stored data from your browser.
Because we never hold a copy, there is nothing for you to request from us and nothing for us to delete on your behalf.
Your responsibilities
Prospekt extracts information that is already published on pages you visit. Contact details relating to identifiable individuals are personal data under laws including the UK and EU GDPR.
Because the data is held solely by you, you are the data controller for it. Collecting it, storing it and — especially — using it for outreach may create obligations under GDPR, PECR, CAN-SPAM, CASL and local equivalents, including having a lawful basis, giving notice, and honouring opt-outs.
Prospekt sends nothing on your behalf and takes no part in how you use what you collect. Please satisfy yourself that your use is lawful. If you are unsure, take your own legal advice.
Children
Prospekt is a professional tool and is not directed at children. We do not knowingly provide it to anyone under 16, and as we collect no data, we hold no information about any user regardless of age.
Changes to this policy
If this policy changes, we will update the effective date at the top of the page and note the change in the extension's release notes. Because the extension holds no account, we have no way to contact you directly — please check back here after an update if it matters to you.
Contact
Questions about this policy, or about how Prospekt handles data, go to contact@ursacode.com. We answer privacy questions ahead of everything else in the inbox.