Privacy policy
Last updated: 7 October 2026
This policy explains what FlowPaste (the website at flowpaste.com and the FlowPaste Chrome extension) collects, why, and what you can do about it. FlowPaste is the data controller.
The short version
- We collect your email address, your plan and how many conversions you run each day.
- The HTML, CSS and JavaScript you convert is processed to produce the Webflow paste and is not kept, unless you save it to your library.
- The extension does not track your browsing. It only reads a web page when you click Capture an element, and only the part you pick.
- We don't sell your data or use it for advertising.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Email address and sign-in details (Google or magic link) | To create your account and let you sign in | Until you delete your account |
| Plan, subscription status, Stripe customer ID | To give you the right features and limits | Until you delete your account, then as required for tax records |
| Daily usage counts (conversions, captures) | To apply the Free plan limits | 90 days |
| Code you convert or capture | To produce the Webflow paste | Not stored after the response, except in short-lived error logs (up to 30 days) if a conversion fails |
| Components you save to your cloud library (Pro) | So you can reuse them | Until you delete them or your account |
| Free online tools (no account): a daily usage count per visitor, keyed by a one-way hash of your IP address mixed with a secret and the date | To limit how often the free tools can be used | 2 days. The IP address itself is not stored, and the hash changes every day |
| Technical logs (IP address, browser, timestamps) | Security, abuse prevention and fixing errors | Up to 30 days |
Payments are handled by Stripe. We never see or store your full card number. History and Free-plan library items are stored locally in your browser by the extension and never sent to us.
The Chrome extension
- Webflow Designer: the extension adds a panel to pages on webflow.com. It does not read your Webflow projects. It writes to your clipboard only when you convert or copy.
- Live Capture: when you click Capture an element and pick part of a page, the extension sends that element's HTML and the CSS that styles it to our server to convert it. If you allow site access, it also downloads that page's stylesheets so styles are captured correctly. Nothing is collected from pages you don't capture.
- Sign-in: the extension stores your session token in Chrome's extension storage so you stay signed in.
Our use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements.
Legal bases (UK and EU users)
We process your data to perform our contract with you (running your account and conversions), for our legitimate interests (security, preventing abuse, improving the product), and to meet legal obligations (tax and accounting records).
Who we share data with
Only the service providers that run FlowPaste for us, under contracts that require them to protect it:
- Cloudflare (website and API hosting)
- Supabase (accounts and database)
- Stripe (payments and invoices)
- Google (only if you choose to sign in with Google)
- Our email provider (sign-in links and account emails)
Some of these providers process data outside the UK and EU, including in the United States. Where they do, transfers are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
Your rights
You can ask to access, correct, export or delete your data, or object to how we use it. You can delete saved components at any time from the extension. To delete your account or make any other request, email privacy@flowpaste.com. We reply within 30 days. If you're in the UK you can also complain to the Information Commissioner's Office (ico.org.uk).
California residents: you have the right to know, delete and correct personal information. We do not sell or share personal information for cross-context behavioural advertising.
Cookies
The website uses only the cookies needed to keep you signed in. We don't use advertising cookies. If we add analytics later, we'll update this page and ask for consent where the law requires it.
Children
FlowPaste is not meant for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll email account holders before the change takes effect.
FlowPaste. Questions: support@flowpaste.com