Graft
Graft Privacy Policy
Last updated: October 25, 2026
Graft is a browser extension that inspects the design of web pages and turns it into design tokens, code and assets. This policy explains what Graft reads, what it keeps, and what it sends. The short version: Graft works on your device and sends nothing about you or the pages you inspect to us or anyone else.
What Graft reads
Graft runs on a tab only after you click its toolbar button or press its keyboard shortcut. On that tab it reads the page's structure, computed styles, stylesheets, fonts and images, and processes them in your browser to show measurements, colors, text styles, assets, contrast results, tokens and code.
Graft does not read form field values: the inspector shows only a field's type and state, and copied code leaves out hidden fields and password values.
What Graft keeps on your device
| Data | Why | How to delete it |
|---|---|---|
| Settings and panel position | To open Graft the way you left it | Remove Graft |
| Token names you change, per website | To keep your names on your next visit | Reset names in the Tokens tab |
| Design QA overlays, per page address | To show your mockup again on that page | Remove overlay in the QA tab |
| Sites you allowed Graft to read from | Your browser keeps the permissions you grant | Your browser's extension site settings |
This data stays in your browser's extension storage. It is not synced and not sent anywhere. Removing Graft deletes it. Page addresses are stored without their query string or fragment.
What Graft sends
- Nothing to us. Graft has no account, no analytics, no telemetry, no ads and no tracking, and it loads no remote code.
- Requests to the sites you inspect. When a feature needs a file the page itself uses (a stylesheet, a font, an image, or a file's size), Graft downloads it from the server that hosts it, without your cookies. This happens only on the tab where you opened Graft, or when you ask to download files.
- Feedback, only if you choose to send it. Send feedback opens a form hosted by Tally in a new tab. The link fills in Graft's version and your browser's name and version; it never includes the page you were on. What you type in the form is sent to Tally and handled under Tally's privacy policy.
Permissions
| Permission | What Graft uses it for |
|---|---|
activeTab, scripting |
Opening the Graft panel on the current tab when you click the button or press the shortcut. |
storage |
Keeping the settings and data listed above. |
downloads |
Saving the files you export (palettes, tokens, images, ZIP files). |
clipboardWrite |
Copying values, CSS and code when you click Copy. |
| Access to sites (optional) | Asked only when you click Allow access, to read stylesheets, fonts or images a page loads from another site. You can decline or remove it at any time. |
Chrome Web Store user data
Graft does not collect, sell or transfer user data. The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Website
graft.flatium.com is a static website without cookies, analytics or embedded third-party content. The hosting provider may keep standard server logs (such as IP address and time of request) for security.
Changes
If this policy changes, the new version is published at https://graft.flatium.com/privacy with a new date, and the changes are listed in Graft's release notes.
Contact
Questions about privacy: contact@flatium.com.