What this covers
This page covers only the CREA browser extension (“Send to Inbox”). For the CREA website and platform itself, see the main privacy policy.
What the extension collects
The extension collects exactly three kinds of data, all locally in your browser:
- Your CREA access token. You paste this once from crea.website/settings/tokens. It is stored in
chrome.storage.sync (Chrome’s built-in settings storage) and sent only to CREA’s own API endpoint. - The URL, title, and image URL of a resource you explicitly choose to capture.This only happens when you right-click “Send to CREA”, press the keyboard shortcut, click the popup send button, or click the “+ CREA” hover button on supported sites (Pinterest, Are.na, Behance, Dribbble, Tumblr, Savee, Cosmos). The extension does not read page content in the background.
- Open Graph / meta tags of the active tab (title, description, cover image, site name) — only when you trigger a “Send this page” action, so the capture lands in your inbox with a proper preview instead of just a URL.
What the extension doesn’t collect
- No browsing history.
- No analytics or telemetry. No third-party scripts load.
- No personal or financial information.
- No content from pages you don’t explicitly capture.
- No keystrokes, clipboard, cookies, or form data.
- No location data.
Where the data goes
The only network destination the extension talks to ishttps://crea.website, specifically:
POST /api/inbox/capture — when you send a capture.GET /api/inbox?limit=0 — when you click “Test connection” in the extension’s settings.
Both requests use the access token you provided. No data goes to any other server, ever.
How to stop
- Remove the extension from
chrome://extensions — all local state (your token, settings) is deleted immediately. - Revoke the access token at crea.website/settings/tokens — the extension will fail at the next request and the server-side can never be called again with that token.
- Delete captured items at crea.website/captures — each item has a delete action that removes it from your inbox.
Open source
The full extension source is public at github.com/takiyx/crea-extension. Every permission, every network call, every line of code is inspectable. If anything on this page is contradicted by the code, trust the code and tell us at takiyx@gmail.com.
Changes to this policy
If we change what the extension collects, this page’s “Last updated” date will change and — for anything material — we will bump the extension’s permissions, which Chrome will prompt you to re-approve on the next update.