Overview
WA Contacts Extractor is a browser extension and accompanying website that helps you export contacts from your own WhatsApp Web session. This Privacy Policy explains what we collect, how we use it, and the choices you have.
The short version: contact lists you export through the extension are generated and downloaded entirely in your browser. Our servers never receive any contact data.
What We Collect
Account information: when you sign in with Google, we receive your email and basic profile from Google's OAuth flow.
Subscription information: when you upgrade to a paid plan, our payment processor (Stripe) handles the transaction and stores your billing details. We see only the high-level subscription status, not your card numbers.
Cookies and identifiers: a small set of functional cookies needed for sign-in, session continuity, and language preference (see Cookies below).
Standard server logs: IP address, browser type, and request timestamps, for security, abuse prevention, and debugging.
Contact lists: extracted by the extension from your WhatsApp Web session and downloaded directly to your device. Our servers never receive contact data.
How We Use Information
To authenticate you and link your account to your subscription status.
To process subscription payments through our payment processor.
To remember your language preference between visits.
To detect, investigate, and prevent abuse of the Service.
To respond to support requests you send us.
To diagnose technical issues and improve the product.
How We Share Information
We do not sell your personal information. We share limited information only with the services we need to operate:
Google — when you sign in with Google, Google receives a standard OAuth authentication event.
Stripe — handles subscription payments. You enter your payment details directly on Stripe's checkout; we do not see or store your card details.
Google Analytics 4 — collects aggregate, pseudonymous usage data (page views, navigation, button clicks) so we can understand how the site is used and improve it. You can opt out from the cookie banner. We use Consent Mode v2, so visitors who decline still contribute only anonymous, aggregated counts.
Hosting and infrastructure providers — operate the website, the API, and our error monitoring. They process data only as needed to keep the Service running, under contractual confidentiality.
Cookies
We use a small set of cookies. We do not use advertising or cross-site tracking cookies.
wace_token — your authenticated session token, used to keep you signed in. Functional, required.
wace_anon — anonymous identifier used before you sign in, so we can link your activity if you choose to sign up later. Functional, required.
i18n_redirected — remembers your preferred language so we don't redirect you again. Functional, required.
wace_consent — remembers your cookie banner choice (granted or denied) so we don't ask again. Functional, required.
_ga, _ga_* — set by Google Analytics 4 to measure aggregate usage. Analytics, optional — opt out from the cookie banner.
The Extension and WhatsApp Web
WA Contacts Extractor reads contact data from your active WhatsApp Web session only when you start an export. The data is processed and downloaded entirely in your browser; it never reaches our servers.
You can verify this by opening your browser's developer tools (Network tab) during an export — you will see no requests carrying contact data to our domain.
Your Choices
You can sign out at any time from your account menu.
You can delete your account by contacting support — we will remove your account and associated data.
You can uninstall the extension at any time from your browser's extension settings.
Data Protection Rights
If you are in the European Economic Area, the United Kingdom, California, or another jurisdiction that grants similar rights, you may request to access, correct, delete, restrict, or export your personal information, and object to certain processing.
To exercise these rights, email us at the address below. We may need to verify your identity before acting on a request.
Data Retention
We keep your account information for as long as your account is active, and for a reasonable period after closure to comply with legal obligations and resolve disputes. You can request deletion at any time.
Security
We use industry-standard practices to protect your information: HTTPS in transit, restricted access to production systems, and modern authentication. No system is perfectly secure — we encourage you to protect your Google account with a strong password and two-factor authentication.
Children's Privacy
WA Contacts Extractor is not directed to children under 13 (or under 16 in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.
International Data Transfers
WA Contacts Extractor operates globally. Your information may be processed in countries other than where you live. Where applicable, we rely on standard data transfer mechanisms to protect your information across borders.
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent change. Material changes will be highlighted on the page or via email when feasible.
Contact
For privacy questions, contact us at support@wacontactsextractor.net.