Privacy Policy — Design Review (Chrome extension)
Last updated: 3 August 2026
Design Review is a Chrome extension that overlays a Figma design frame on the web page the user is currently viewing, so the user can find visual discrepancies between the design and the implementation.
This policy explains exactly what data the extension touches, where that data goes, and what the developer receives. The developer operates no server and receives no user data of any kind.
1. Data the extension handles
1.1 Credentials you enter yourself
In the extension’s Options page you may enter:
- a Figma personal access token, and
- an AI provider API key (Anthropic).
These are stored with chrome.storage.local on your own computer. They are transmitted only to the
service they belong to — the Figma token to https://api.figma.com, the AI key to
https://api.anthropic.com — as the authorization header of the request that you triggered. They
are never sent anywhere else, and never to the developer.
1.2 Page content of the page you review
When you start a review, the extension:
- takes a screenshot of the visible area of the current tab,
- reads the layout of the elements you click (size, spacing, colour, typography, and a CSS selector identifying the element),
- downloads the Figma frame image and its layer data from the Figma API.
This is used to render the comparison and to build the list of findings you export. It is kept in local extension storage for the duration of the review and is overwritten by your next review.
1.3 Settings
The last Figma URL you used, the diff threshold and the selected model are stored locally so the form is pre-filled next time.
2. Where data is sent
The extension sends data to exactly two destinations, both at your initiative:
https://api.figma.com— when you start a review. Contains the Figma file/node id you pasted and your Figma token. Governed by Figma’s own privacy policy.https://api.anthropic.com— only when you click the optional “AI review” action. Contains the Figma frame image, the screenshot of the page you are reviewing (or the region you selected), and your own Anthropic API key. Governed by Anthropic’s privacy and data-usage terms for API traffic. If you never enter an AI key and never use that action, this request never happens.
There is no analytics, no telemetry, no crash reporting, no advertising, and no developer-operated backend. No data is sold, rented, or transferred to any third party other than the two APIs above, which act on your behalf under your own credentials and solely to deliver the extension’s single purpose.
3. Data retention and deletion
All data lives in your browser profile. To delete it: clear the fields in the extension’s Options page, or remove the extension — uninstalling Chrome extensions deletes their local storage, including tokens, screenshots and findings.
4. Permissions and why they are needed
| Permission | Why |
|---|---|
activeTab |
Screenshot the tab you are reviewing and show the overlay in it, after you start a review |
scripting |
Inject the overlay into that one tab, hide the page scrollbar before the screenshot, and read the measured elements’ layout values |
storage |
Keep your settings and the current review session locally |
unlimitedStorage |
A session holds two full-resolution images, which exceeds the default 10 MB quota |
windows |
Resize the browser window so the viewport width matches the design frame width |
Host access to api.figma.com, api.anthropic.com |
Fetch the design frame; run the optional AI review |
The extension requests no host access to the pages you review and registers no content scripts: nothing of it runs on a page until you start a review on that tab, and then only on that tab.
5. Children
The extension is a professional tool and is not directed at children under 13.
6. Changes
Material changes to this policy will be published at this URL with an updated date, before or at the time the corresponding extension version is released.
7. Contact
Questions about this policy: margo.romanova26@gmail.com