Skip to content
LEMONAdd to Chrome

Data handling

Lemon Collector is a Chrome extension used by KOL Specialists to read creator profiles on Instagram and TikTok and enrich them with campaign metadata. It is published, unlisted, on the Chrome Web Store by PT CCHANNEL MEDIA INDONESIA. This page is the extension's own data disclosure; the corporate privacy policy linked from the store listing covers the wider product.

What the extension reads

No page outside those two profile types is read, and nothing is read from a tab without a profile page open.

  • Profile pages on instagram.com and tiktok.com: the profile's public fields (username, display name, bio, follower count) and the public engagement counts of its recent posts (likes, comments, views, shares, saves, and whether a post is a paid partnership or collaboration).
  • The URL of the tab, to tell which profile a page is showing and to keep the side panel pinned to it.

What it stores locally

All of it lives in chrome.storage for the browser profile the extension is installed in.

  • Scrape results and the profile cache.
  • One follower snapshot per profile per day, so the panel can show a 7-day delta.
  • Your settings, including the Lemon CMS API key. The key is sent only to Lemon CMS, never to a page you visit.

What it sends, and where

There is no analytics, no telemetry, and no advertising identifier. The only destinations are the Lemon CMS APIs and the object-storage host that Lemon CMS issues upload links for — both are listed below.

  • Lemon CMS — api.cms.lemon.co.id and api.alpha-cms.lemon.co.id, over HTTPS, authenticated with your API key. Saves you trigger and the reads the panel performs for categories, regions, campaigns and your own account go here.
  • Rate-card documents — uploaded with a short-lived presigned URL issued by Lemon CMS, to the object storage host that issued it.
  • During development only — a local Lemon CMS dev server on localhost:3001 and the test mock on localhost:3002. Production builds do not request these origins.

What it never collects

  • Login credentials, cookies or session tokens for Instagram or TikTok.
  • Browsing history beyond the profile pages you open.
  • Location, financial, or health data.
  • Content from any page other than an Instagram or TikTok profile.

Permissions, and why each is needed

  • storage — keep profile data, the cache, follower history and your settings in the browser.
  • activeTab — read the current tab to recognise a profile URL and start scraping.
  • sidePanel — the extension's only UI surface.
  • tabs — notice navigation to and away from profile pages so the panel updates.
  • instagram.com, tiktok.com — the pages the extension is allowed to read.
  • api.cms.lemon.co.id, api.alpha-cms.lemon.co.id — the Lemon CMS APIs the panel reads and saves through.
  • *.amazonaws.com — rate-card document uploads, whose bucket host is only known at upload time.

Keeping and deleting data

  • Locally: removing the extension, or clearing its storage, deletes everything it kept in the browser.
  • In Lemon CMS: profiles, metadata and follower history you sync are stored under your company's account and follow its access rules. Deletion requests go through your Lemon CMS administrator.

Contact

PT CCHANNEL MEDIA INDONESIA — Bellagio Mall UOG 12, Jl. Mega Kuningan Barat No. 3, Kuningan Timur, Setiabudi, Jakarta Selatan 15810, Indonesia. Email developer@lemon.co.id.

For any question about this disclosure, or to request deletion of data the extension has synced, contact your Lemon CMS administrator.