This privacy policy applies to the Chrome extension Facebook Ads Library Scraper Pro (also referred to as AdSpy), published by ScaleForge. The extension's home page and documentation are hosted at getscaleforge.com/extension/adspy. For privacy questions, contact [email protected].
AdSpy helps media buyers, agencies, dropshippers, and marketers collect and analyze publicly available advertisements from Facebook's Ad Library (facebook.com/ads/library). The extension runs only on that URL and on Facebook's CDN (fbcdn.net) where ad media is hosted. It extracts ad text, library IDs, start dates, platforms, call-to-action buttons, creative video and image URLs, and landing-page links — all of which Facebook publishes openly for anyone to see.
Signing in is required to enable cloud sync, Hunter mode, and Watchlist features. We authenticate through Google Firebase Authentication and store:
free, business, or agency) and trial statusWe do not collect or store your password. Email/password authentication is handled entirely by Firebase Authentication — Firebase hashes your password and we never see the plaintext value.
When you click "Scan Page" on a Facebook Ad Library URL, the extension reads the publicly rendered ad cards and extracts:
Automatic saving to your account (since version 3.2.0). When you are signed in, every completed scan — the ad data listed above, the Ad Library address you scanned, the number of ads and whether the scan finished — is sent automatically to your ScaleForge account at getscaleforge.com. This powers your scan history, the “N new since your last scan” count and the gallery in your ScaleForge dashboard. To show previews in the gallery, our server downloads a small preview image of each ad from Facebook's CDN; previews that no scan has used for 120 days are deleted automatically.
You can turn automatic saving off at any time in the extension's Help panel (“Save my scans to my ScaleForge account”). When it is off, scan results stay on your computer and are uploaded only when you explicitly click:
Saved scans are private to your account. A scan becomes visible to others only if you create a share link yourself; shared pages are excluded from search engines, and you can stop sharing at any time.
To improve the product and monitor reliability, the extension records anonymous event records in your Firebase user document (users/{uid}/events). These events describe your own usage (not other users' data):
scan_started, scan_completed, tab_switched, export_clicked)crypto.randomUUID(); lives until you close the browser)Events do not contain the content of the ads you scrape, your email, your tokens, or any credentials. They are tied to your Firebase user ID and are only visible to ScaleForge engineers for debugging and aggregate analytics.
The extension uses chrome.storage.local to cache:
This data lives on your computer. Uninstalling the extension removes all of it.
After the extension is removed, Chrome opens a short page on getscaleforge.com. Its address contains only four values: the extension version, the interface language, the number of whole days since installation, and whether anyone ever signed in on that install (yes/no). No email, account ID or browsing data is included. If you choose to answer the one-question form on that page, we store your answer and optional comment together with those four values. Your IP address is not stored with your answer; a one-way hash of it is used only temporarily to prevent abuse of the form.
If you buy a plan, the payment is processed by WayForPay; we never see or store your card number. We receive the payment status, amount and plan so we can activate it. Service emails (sign-in links, receipts, trial reminders, Watchlist updates) are sent to your account email; Watchlist update emails can be turned off with one click.
facebook.com/ads/library and fbcdn.net.Required to display the extension's main interface (scanner, watchlist, hunter) in Chrome's built-in side panel.
Required so the extension can read the currently open Facebook Ad Library tab when you click "Scan Page". Access is granted only on explicit user gesture and ends when the tab closes or is navigated elsewhere.
Used for chrome.storage.local (local settings, API token, onboarding state) and chrome.storage.session (cached scan results during a single browser session).
Used for Google Sign-In via chrome.identity.launchWebAuthFlow. We request only your email and basic profile (name, avatar) scopes. We do not read your Gmail, Drive, Calendar, or other Google services.
Used to schedule daily auto-scans for watchlist items. Scans run silently in a background tab that is created and immediately closed by the extension — your active tab is never hijacked.
Re-injects the extension's own bundled content script into Facebook Ad Library tabs that were already open when the extension was installed or updated, so scanning works without reloading the page. Injection is limited to facebook.com tabs, and only code shipped inside the extension package is injected.
Used to alert you when an auto-scan fails (so you know to retry) or when a daily scan completes with new results. Notifications are only about your own activity — we never push promotional content.
*.facebook.com, *.fbcdn.net)Required to read the public Ad Library DOM and to download the creative media referenced by those ads. The extension does not inject code or read data on any other host.
We do not sell your data. We share the minimum necessary with:
getscaleforge.com) — our own server. It receives your scans (automatically, unless you turn automatic saving off) and the creatives you hunt or add to your Watchlist, so you can work with them in the ScaleForge web dashboard. The API validates your ScaleForge token on every request.The extension ships with all of its executable code bundled inside the package uploaded to the Chrome Web Store. It does not download, inject, or execute any remote scripts at runtime. Firebase and ScaleForge SDKs are statically linked at build time.
You can exercise the following rights at any time:
If you are in the European Economic Area, you have the rights described in Articles 15–22 of the GDPR (access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority). Our lawful basis for processing account data is the performance of a contract (providing you the service you signed up for); our basis for event telemetry is our legitimate interest in maintaining and improving the product.
We do not sell personal information. California residents have the right to know, delete, and opt out as described in the California Consumer Privacy Act. Email [email protected] to exercise these rights.
The extension is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe a child has used the service, contact us and we will delete the account.
Material changes will be announced by updating the "Last updated" date at the top of this page and, where practical, inside the extension's release notes.
This extension is an independent tool and is not endorsed, sponsored, or affiliated with Meta Platforms, Inc. "Facebook" and "Meta" are trademarks of Meta Platforms. The extension only interacts with publicly available information that Meta itself publishes in its Ad Library transparency tool.
Questions, data requests, or complaints:
Email: [email protected]
Facebook Ads Library Scraper Pro · Version 3.2.0 · Last updated November 15, 2026