Privacy Policy: MapleTap

Last updated: September 10, 2026

Overview

MapleTap is a Chrome browser extension that performs on-page SEO and GEO analysis. This policy explains what data the extension accesses, what it stores, and what it does not do.

Data We Do Not Collect

MapleTap does not:

• Collect, transmit, or sell any personal data
• Send your page content, audit results, browsing history, or any personal data to any server
• Require account creation or login
• Use analytics or tracking services
• Store any data outside your local browser

Data Stored Locally

MapleTap uses chrome.storage.local to save SEO audit scores and basic page metadata (URL, title, meta description, word count) per domain. This data:

• Never leaves your device
• Is used only to display your audit history within the extension
• Retains the last 10 audits per domain
• Can be cleared at any time via Chrome's extension data settings

Network Requests

MapleTap makes the following outbound network requests, all initiated by user action:

• Raw HTML fetch. Fetches the server HTML of the current page to detect rendering mode (SSR vs. CSR). No data is stored or transmitted beyond your browser.
• Response headers fetch. Reads HTTP response headers (CSP, HSTS, and similar) from the current page's URL for the security audit.
• Sitemap detection. Reads the current domain's robots.txt for declared sitemap locations, then checks common sitemap paths (such as /sitemap.xml, /sitemap_index.xml, and /wp-sitemap.xml) to report whether a sitemap exists. Runs automatically as part of the audit.
• Sitemap analysis. Fetches the full sitemap from the current domain when you click "Analyze Sitemap," to suggest internal linking opportunities.
• Page title fetch. Fetches the <title> tag of up to 20 pages from the current domain's sitemap when you use the internal links feature.
• Redirect chain check. Follows the redirect chain for the current URL to detect HTTP hops.
• llms.txt check. Checks whether the current domain publishes a llms.txt file. Used only to report whether one exists.
• AI crawler check. Reads the current domain's robots.txt to check whether it blocks named AI crawlers (such as GPTBot, ClaudeBot, or PerplexityBot). Used only to report which, if any, are blocked.
• Broken link check. Sends a lightweight request (HEAD request, no page content downloaded) to up to 15 of the current page's own internal links, to report whether any return an error status. Only checks links already found on the page you are viewing.
• Field Core Web Vitals lookup. Sends the current page's URL (or its origin, if the exact URL has no data) to Google's public Chrome UX Report API to retrieve anonymous, aggregated real-user performance data (LCP, INP, CLS, FCP, TTFB). This is the only request that goes to a server other than the site you are auditing. It uses a bundled API key restricted to this single read-only API, includes no information about you, and returns only statistics. If the request fails or has no data, MapleTap falls back to a local lab measurement.

With the single exception of the Core Web Vitals lookup above, which goes to Google's public API and returns only anonymous statistics, no data is sent to MapleTap or any third party. All other processing happens locally in your browser, and every other request goes directly from your browser to the site you are auditing.

Permissions Used

• activeTab / scripting. To read SEO data from the page you are currently viewing, and to apply the optional nofollow-link highlight.
• storage. To save audit history locally in your browser.
• tabs. To open external tools and the full report in new tabs, and to reload the page when toggling JavaScript.
• debugger. To toggle JavaScript on and off on the active tab, which simulates Googlebot crawl behavior.
• host_permissions (<all_urls>). To fetch raw HTML, headers, sitemaps, robots.txt, llms.txt, and redirect chains from the domain you are auditing. The domain is not known in advance, so the permission cannot be limited to a fixed list of sites.
• host_permissions (chromeuxreport.googleapis.com). To look up field Core Web Vitals for the current page from Google's public Chrome UX Report API.

Third-Party Services

The extension includes links to third-party SEO tools (Ahrefs, SEMrush, Google Search Console, and others). When you click these links, you are subject to those services' own privacy policies. MapleTap does not share any data with them. The field Core Web Vitals lookup described above uses Google's Chrome UX Report API and is subject to Google's privacy policy.

Donations

The "Tip the Tap" button opens a PayPal donation page. Any payment is processed directly by PayPal and is subject to PayPal's privacy policy. MapleTap does not receive or store any payment information.

Changes to This Policy

If this policy changes, the updated version will be posted at this URL with a new "Last updated" date.

Contact

Questions? Email omkar.growth@gmail.com