Privacy policy
Last updated 12 November 2026
MapScraper extracts business information that is already published publicly on Google Maps and Bing Maps. This page explains what we store about you, what happens to the data you extract, and what the browser extension does and does not send us.
Who we are
MapScraper ("we") operates mapscraper.io and the MapScraper browser extension for Chrome and Edge. For privacy questions, write to privacy@mapscraper.io.
What we collect about you
| Data | Why | Kept for |
|---|---|---|
| Email address | It is your account identifier and how we reach you about your account | Until you delete the account |
| Name, and optionally company and country | Shown in the dashboard and used on invoices | Until you delete the account |
| Password (email sign-up only), stored as a one-way hash | Signing you in; we cannot read it | Until you change it or delete the account |
| A salted hash of the IP address used at sign-up and for each scan | Limiting new accounts and the free scan to one per network, so the free tier is not farmed | Until you delete the account or the job |
| Session records (token, IP, user agent, timestamps) | Keeping you signed in and detecting abuse | 30 days after the session ends |
| Search terms, job records, lead balance and ledger | Running your scans and showing what was used | Until you delete the job or the account |
| Rate-limit counters keyed to your IP | Stopping automated abuse of sign-up and the public demo | At most one hour |
If you sign in with Google we never see a password at all. We do not run third-party advertising or analytics trackers.
If you join the partner program, we also keep the code you claimed, your name, email, the channel link and payout details you give, and which orders were placed through your link, so we can pay you. Kept while you are a partner and for as long as tax and accounting rules require after the last payout.
The browser extension
The extension reads the Maps results page you already have open, in your own browser session and over your own connection. Extracted rows stay in the browser until you export them or explicitly hand the scan to the cloud.
Its permissions are deliberately narrow:
- Host access limited to
google.com/maps— it cannot read any other site. storage— caches the selector configuration and your last run locally.sidePanel— draws the interface beside the page.
The extension sends us one thing on its own: breakage telemetry. When it parses fewer rows than expected it reports the pack version, which fields failed, the browser, the extension version and the Maps interface language. It contains no business data, no URLs and no personal data, and it is what makes the 24-hour repair guarantee possible.
It also downloads the current selector configuration from mapscraper.io (a request that carries only the version it already has). Links from the extension to our site are tagged utm_source=chrome-extension or edge-extension so we can count sign-ups that came from the store.
The data you extract
Business names, addresses, phone numbers, websites and public review information belong to the businesses concerned, not to us. Where you run a cloud scan we store those rows so you can export them; you can delete a job at any time, which deletes its rows.
How you use extracted data is your responsibility. A business phone number or email can still be personal data under the GDPR, the UK GDPR, Turkey's KVKK and similar laws. If you send marketing to it you are the data controller for that processing: the lawful basis, the disclosure notice, the opt-out and any local rules on unsolicited contact are yours to meet. Nothing here is legal advice.
Who else touches the data
- Hosting and database providers, to run the service.
- A payment processor, when you pay. Card details never reach our servers.
- An email provider, to deliver sign-in links.
We do not sell personal data and we do not share it for advertising.
Your rights
You can request access, correction, export or deletion of your personal data at privacy@mapscraper.io. Deleting your account removes your profile, sessions, jobs and stored leads. We answer within 30 days.
Cookies
First-party cookies only: your session, so you stay signed in; a random browser id, so the free trial is one per browser; where your first visit came from (a referring site or utm tag, and the landing page); and, if you arrived through a partner's link, that partner's code for 60 days. There are no advertising or third-party analytics cookies.
Changes
If this policy changes materially we will say so on this page and, for account holders, by email before the change takes effect.