Back to home

Privacy Policy

How FolderFetch handles local collections, account information, optional AI requests, and service data.

Last updated: 2026-10-06

Overview

This policy covers the FolderFetch browser extension and website. FolderFetch finds, reviews, organizes, and downloads files from websites you choose. Ordinary scanning and library use are local to your browser. Account features and a request you make to hosted AI involve online processing described below.

Local scans and downloads

The extension processes the pages and links you ask it to scan, candidate file details, saved sources, scan history, snapshots, folder rules, and local library state in your browser. Chrome's download system saves files to your device. Ordinary scanning, review, downloading, and local-library use do not send those page contents, scan URLs, downloaded files, browser cookies, form values, or local file paths to FolderFetch servers. The websites you visit or download from still receive the requests needed to access their pages and files.

These local records stay in browser storage until you remove them, clear browser data, or uninstall the extension. Signing in does not back up or restore them from a FolderFetch account.

Account and security information

If you use an account, we process your account identifier, email address, display name, and any profile image or information returned by your chosen sign-in provider. We keep linked sign-in and session records, which may include authentication tokens, IP address, browser or device information, and timestamps. We use these records to sign you in, protect the account, connect the extension, prevent abuse, and provide the features available to your account. Google receives and processes information when you choose Google sign-in under its own privacy policy.

Account records may also include plan and entitlement status, AI usage counts and request identifiers, preferences or consent choices, and any support ticket content you submit. When you connect the extension, it stores your account ID, email, display name, entitlement, and an access token in Chrome local storage. The access token expires after 30 days; disconnecting the account removes this stored account record from the extension.

Optional hosted AI organization

The hosted AI feature is used only when you choose to start an AI organization request. The request can include selected file titles and types, folder or path labels, page headings, nearby visible text, and a compact representation of page structure. Our website forwards this information to a separate FolderFetch AI service and then to a third-party AI model provider to generate an organization suggestion. The resulting suggestion is returned to you. This transfer is necessary for the requested AI feature; ordinary local scans do not make it.

We do not intentionally include downloaded file bodies, browser cookies, passwords, or your full browsing history in an AI request. Avoid selecting sensitive page content for hosted AI. To recover an interrupted response without another model run, the AI service may keep the generated result in temporary memory for up to ten minutes; it is not added to a cloud copy of your local library. Account and service records may contain usage counts, request identifiers, token totals, timing, and status rather than complete request payloads.

Other service providers and features

Website hosting and database providers process the account and network information needed to run the site. A sign-in provider processes the information needed for the sign-in method you choose. The third-party AI model provider receives the limited request data described above only when you use hosted AI. We share data with these service providers for the stated features, security, and legal obligations, not for advertising or resale.

Payment checkout and third-party website analytics are not currently enabled. FolderFetch does not receive complete payment-card numbers. The website sends email through Resend. When we send account, security, or support emails, Resend processes sender and recipient addresses and message content. Messages sent to our public support address are forwarded by Namecheap to our receiving inbox; the relevant email services process addresses and message content. Before enabling payment or website analytics, we will update this policy to explain the data involved and recipients, and address any consent required by applicable law.

Cookies, storage, and optional product metrics

The website uses cookies or equivalent storage needed for sign-in and session security, and may save language or theme preferences. Website requests may be processed with IP address and browser information for hosting, rate limiting, troubleshooting, and security.

The extension's optional product metrics are off by default. If you enable them, it sends a limited set of events to the FolderFetch website, such as the first completed scan or download, a registration-prompt click, or a successful extension connection. These event payloads do not include scanned URLs, page titles, file names, search queries, document contents, or local paths. The receiving server may still process request metadata such as IP address for security. You can disable this setting in the extension.

Retention, export, and deletion

Local extension data remains on your device until you remove it or clear the extension's browser storage. The temporary AI result described above is held for no more than ten minutes. We keep account, usage, support, and security records for the time needed to provide the service, investigate abuse, handle requests or disputes, and meet legal obligations; the period depends on the record and reason for retention.

Signed-in users can export available account data and submit an account-deletion request from account settings. Submitting a request records it for processing; it does not immediately or automatically erase all account data. Some records may need to be retained for security or legal reasons. Account deletion does not remove files you have already downloaded or local extension records on your devices; you can clear those separately.

Chrome Web Store Limited Use

FolderFetch's use of information obtained through Chrome extension permissions complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this data only to provide or improve the extension's stated purpose and related operation or security. We transfer it only when needed for that purpose, to comply with law, to protect against fraud or abuse, or in another case allowed by that policy. We do not sell user data or use it for personalized advertising, advertising platforms, data brokers, or credit decisions. People do not read extension user data except with your explicit consent for specific support, for permitted aggregated and anonymized internal operations, when necessary for security, or when required by law.

Security and your choices

Online requests use HTTPS. We use access controls and security measures for account and service data, but no internet service can guarantee absolute security. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export personal data and to withdraw consent. This policy does not limit rights that cannot be excluded by law.

FolderFetch is not directed to children under the age required to consent to online services where they live.

Changes and contact

We will update this policy when data practices or active service providers change and will give appropriate notice of material changes. Email privacy questions or requests to support@folderfetch.com. Signed-in users can also use Settings → Support Tickets. See the Support page for more information.