Open a product listing, click Scrape, and a CSV of two hundred rows lands in your Downloads folder before the kettle boils. That part of the pitch is true. It is why a browser extension is still the right first tool for a one-off job, and why no amount of Python changes the answer when you need one table today.
The rest of the pitch needs checking. Instant Data Scraper, the most widely recommended free scraper extension, changed hands some time before April 2026. The new owner's privacy policy states that it collects the URL of every page you visit and sends it to their servers. An earlier version of this article called that extension local, with no cloud involved. True of the build Web Robots maintained. Not true of the one you install today.
Everything below was rechecked on 10 August 2026. User counts, ratings, versions and update dates come from each extension's own Chrome Web Store listing; prices come from the vendor's own pricing page. Where a vendor renders its prices in JavaScript we could not read, that is said outright instead of being filled in from a comparison site.
What you are actually installing
A scraper extension needs the widest permission Chrome grants. To read a page's DOM on any site, it asks for host access to every site, which Chrome describes in plain words on the install dialog. There is no narrower version of this. A tool that only worked on domains you listed in advance would not be a general scraper, and none of the tools below pretend otherwise.
That permission is also the whole reason extensions work so well. An extension reads the page after the browser has finished rendering it, so React and Vue apps that return an empty <div> to a plain HTTP request hand over a full table to an extension. It runs inside your logged-in session, so paginated dashboards and members-only listings are visible. It carries your real browser fingerprint, your real cookies and your real residential IP, which means most bot detection sees a person clicking around. Nothing in a proxy pool buys that cheaply.
The same properties are what make a compromised scraper extension expensive. In December 2024 attackers phished extension developers with fake Chrome Web Store policy-violation emails, got them to authorise a malicious OAuth application, and pushed data-stealing updates through the legitimate update channel. BleepingComputer's reporting counted at least 35 hijacked extensions with roughly 2.6 million users between them. Every one of those users had already granted the permission the attacker needed. Nobody had to click anything.
Ownership changes are the quieter version of the same risk. An extension you vetted in 2023 can be sold in 2026 to a company you have never heard of, and Chrome will keep updating it silently because the listing ID did not change. Instant Data Scraper is the live case study, and it is covered in detail below.
Chrome's actual safety net is narrower than the marketing suggests. Since Chrome 117 the chrome://extensions page runs a Safety check that flags three specific conditions: the extension was unpublished by its developer, it was taken down for violating Chrome Web Store policy, or it was marked as malware. Extensions marked as malware are disabled automatically. That is the whole mechanism. A previous version of this article credited Chrome with an "AI Permission Monitor" that automatically flags extensions asking for excessive permissions in early 2026. We went looking for it in Google's own documentation and developer blog and found nothing of the kind. Treat that claim as retracted.
The store deadline three weeks from now
On 31 August 2026 all remaining Manifest V2 extensions are removed from the Chrome Web Store. Google's own migration timeline states it directly: items still on MV2 come down, and copies already installed on Chrome 138 or earlier stay installed but stop receiving updates.
The disabling happened earlier and was more abrupt. From 31 March 2025, MV2 extensions were off by default with a toggle to turn them back on. From 24 July 2025, with Chrome 138, that toggle went away.
For a reader following a roundup written in 2022, the practical consequence is simple. Any scraping extension on that list which never shipped an MV3 build is already dead in your browser and is about to vanish from the store as well. Every extension in this article is on MV3, because Chrome has refused updates to anything else for over a year. Checking the "last updated" date on a Web Store listing is no longer optional politeness. It is the cheapest liveness test you have.
How they work
An extension reads the rendered markup, optionally waits for JavaScript to finish, and pulls out the elements you point it at. How you do the pointing splits the field into three approaches.
Point-and-click. You click elements on the page and the tool records the underlying CSS selectors or XPath, then replays them against every matching block. It is the only approach that stays predictable across a run of ten thousand pages, because the rule is fixed and you can read it. It also asks the most of you: nested lists, pagination links and detail pages all have to be modelled by hand.
Auto-detect. The extension looks for repeating structures and tables and offers you the biggest one it finds. Zero configuration, and on a standard catalogue or directory it is right the first time. On a page with two similar-looking grids it picks one, and the only way to find out which is to look at the export.
Natural language. You describe the fields you want and a model works out the selectors, usually charging you credits for the analysis rather than for the rows. This is the fastest route on an awkward page and the most expensive one on a simple page. It also fails differently: instead of returning nothing, it returns something plausible and slightly wrong, which is harder to notice in a spreadsheet.
The extensions worth knowing
Numbers in this section were read from each extension's Chrome Web Store listing and each vendor's pricing page on 10 August 2026.
Web Scraper (webscraper.io)
The mature option, and the only one on this list built around a portable configuration file. You describe a sitemap: a start URL and a tree of selectors, each with a CSS selector, a parent selector and a flag for whether it matches one element or many. Sitemaps export as JSON, import into another browser, and survive being handed to a colleague. Nothing else here gives you a scrape you can put in version control.
800,000 users, 4.1 from 1,100 ratings, version 1.111.13, updated 15 July 2026. The extension is free and runs locally. Web Scraper Cloud starts at $50 a month for 5,000 URL credits and two concurrent scrapers, $100 for 20,000 credits and three, $200 and up for unlimited credits with 60-day retention and residential proxies at $2.50/GB. Those figures are the annual-billing rates shown on the pricing page; the monthly-billing prices are not published as plain text.
Two corrections against older roundups, this article's previous version included. The ready-made marketplace exists and holds roughly a hundred prebuilt scrapers, but the sites it covers are Amazon, eBay, Walmart, Etsy, Zillow, Rightmove, Booking.com, Tripadvisor, Yelp, Trustpilot, ZipRecruiter, Monster and similar. There is no LinkedIn scraper and no Indeed scraper, and the closest thing to Google Maps goes through Superpages. Second, the extension does not quietly scrape in the background: the documentation states that "a new popup window will open in which the scraper will load pages and extract data from them." Close that window and the run ends.
Instant Data Scraper
1,000,000 users, 4.9 from 7,600 ratings, version 1.6.1, updated 16 July 2026. Still the fastest thing on this page for a table you need right now. Auto-detection, infinite scroll, pagination, CSV and XLSX export, no account.
The listing's developer is now Flavr Technology, LP, a Delaware entity whose site does not name an owner or any staff. Web Robots, which built it, now says on its own home page, verbatim: "Instant Data is no longer owned, developed or supported by Web Robots." Indicator, the newsletter run by Craig Silverman, reported the change on 24 April 2026 after readers noticed the new publisher name. Flavr did not answer its questions. At least one OSINT trainer had already uninstalled the extension.
What the new owner publishes about the extension is more concrete than the silence. The privacy policy, last updated 30 July 2026, covers "our Instant Data Scraper extension" by name. It states that "when you use the Extension, we automatically collect data about the URLs of web pages you visit during your browsing sessions." It then lists search queries and the results pages returned, e-commerce activity, interactions with AI features, ad interactions and a hashed IP address. Each is transmitted to their servers on collection. The stated way to opt out is to uninstall. The terms, updated 31 July 2026, grant a "personal, limited, non-exclusive and non-transferable" licence and forbid commercial use "unless you obtain Company's prior written approval."
Read those two sentences together. The tool most often recommended for lead generation and competitor price monitoring now forbids commercial use without written permission, and logs the URL of every page you open while it is installed. There is also no Pro plan, contrary to what this article said previously and what several comparison sites still say; Flavr publishes no pricing at all.
Data Miner
300,000 users, 3.9 from 703 ratings, version 5.8.102, updated 18 January 2026. Listed as "Data Scraper - Easy Web Scraping" in the store, which is why people fail to find it.
Its selling point is the recipe library: point it at a known site and someone has usually already written the extraction rules. The real number is 50,000-plus public recipes covering 15,000-plus sites, stated on dataminer.io. The "over a million prebuilt scenarios" figure that circulates, and that this article repeated, does not come from the vendor.
Pricing as of 10 August 2026: Starter free with 500 pages a month, Solo $19.99, Small Business $49 for 1,000 pages, Business $99 for 4,000, Business Plus $200 for 9,000. Note that Solo costs money and gives the same 500 pages as the free tier, so what you are buying there is the feature set, not volume. Paid tiers add automation, custom JavaScript and Google Sheets delivery.
Thunderbit
100,000 users, 4.2 from 195 ratings, version 4.6.6, updated 10 August 2026. The most actively developed AI-first option, and the one shipping features fastest: subpage enrichment, scheduled runs, extraction from PDFs and images, delivery into Sheets, Airtable and Notion.
Its pricing page renders client-side and returns no numbers to a plain fetch. The figures Thunderbit publishes elsewhere on its own site: a 10-page free trial, then 6 pages a month on the permanent free plan. Paid starts at $15 a month for 500 credits, where one credit is one row, and runs to $249 a month for 20,000. Six pages a month is not a tier you can evaluate anything on, and the rating reflects some of that. Judge it on the paid plan or not at all.
Chat4Data
10,000 users, 4.6 from 180 ratings, version 3.0.13, updated 6 July 2026, published by Lumoris Technologies Inc. It does carry the Chrome Web Store Featured badge, which is real and worth something. It does not have hundreds of thousands of users; this article said so previously, and the store listing says ten thousand.
The model is a chat window over the page: describe the fields, confirm what it found, export to Excel, CSV or JSON. Pricing is 300 welcome credits free, Pro $10 a month for 2,000 credits, Max $35 for 8,000. Credits go on the AI analysis rather than the rows, and the docs put a scraper configuration at 60 to 200 credits; once configured, a scraper runs without spending more. That is the right shape for repeated jobs on the same site and the wrong shape for one visit each to forty different sites.
HARPA AI
300,000 users, 4.7 from 3,200 ratings, version 14.4.0, updated 29 June 2026, from HARPA AI TECHNOLOGIES OY in Finland. Less a scraper than an automation surface with scraping in it: a command language with {{page}} for the whole page and {{grab}} for individual elements by CSS, XPath or text, plus monitoring for price and availability changes. The Grid API drives the browser remotely and connects to Make, Zapier and n8n. Pricing is metered in what HARPA calls Megatokens, roughly 100 command runs each: the free demo allows 10 messages a day and 100 command runs in total, then $12 a month on annual billing for 75 Megatokens a year and $19 for 225.
If your problem is "collect this table," it is more machinery than you need. If your problem is "check these forty pages every morning and tell me what moved," it is the only tool here built for that.
Three the lists usually miss
Easy Scraper has the best ratings on this page by a distance: 100,000 users, 5.0 from 1,200 ratings, version 1.4.1. It extracts lists and detail pages, handles rendered content, exports CSV and JSON, is free, and states that it operates locally in your browser. The one caveat is the update date, 31 October 2025, which is nine months of silence.
Simplescraper is the middle ground between an extension and a platform: automatic list detection, a side panel that fills while you browse, AI column naming, cloud scheduling and an API. 60,000 users, 4.4 from 364 ratings, version 2.1.6, updated 25 March 2026. Its listing promises unlimited free scraping of a single page, with cloud runs and scheduling on the paid side. We could not read the paid prices: the pricing page renders entirely in JavaScript and returns nothing to a plain fetch, and the figures in circulation come from competitors' comparison posts rather than from Simplescraper.
Listly is the one to try when you want a spreadsheet and nothing else. Click a list, table or card and it takes every similar item, with auto-scroll, multi-tab extraction and link following. 100,000 users, 4.7 from 952 ratings, version 0.9.7, updated 5 August 2026. The free plan is 10 URLs a month, Light is $30 ($25 annual) with unlimited basic extraction and 500 advanced URLs, Business $90 ($75 annual) with 1,000 advanced URLs, a datacentre proxy and scheduling.
Two the lists oversell
Pline and AIScraper both appear on 2026 roundups, including the previous version of this one, in language that implies an established tool. The store says otherwise. Pline has 1,000 users and 10 ratings. AIScraper has 3,000 users and 13 ratings, and its listed developer contact is a personal Gmail address. Both are maintained and both publish real prices: Pline runs $39 a month, or $29 on annual billing, after a 200-credit trial, and AIScraper sells credits outright from $6 for 200, at one to three credits a page. The point is not that they are cheap or expensive. The point is the sample size. Granting full read-and-write access to every site you visit on the strength of ten reviews is a different decision from granting it on the strength of seven thousand. Roundups that list these two beside Web Scraper hide that difference behind identical formatting.
The numbers side by side
Read from Chrome Web Store listings and vendor pricing pages on 10 August 2026.
| Tool | Users | Rating | Last update | Free tier | Paid from |
|---|---|---|---|---|---|
| Web Scraper | 800,000 | 4.1 / 1.1K | 15 Jul 2026 | extension free, unlimited local | $50/mo cloud |
| Instant Data Scraper | 1,000,000 | 4.9 / 7.6K | 16 Jul 2026 | free, no published paid plan | none published |
| Data Miner | 300,000 | 3.9 / 703 | 18 Jan 2026 | 500 pages/mo | $19.99/mo |
| Thunderbit | 100,000 | 4.2 / 195 | 10 Aug 2026 | 6 pages/mo after a 10-page trial | $15/mo, 500 rows |
| Chat4Data | 10,000 | 4.6 / 180 | 6 Jul 2026 | 300 welcome credits | $10/mo, 2,000 credits |
| HARPA AI | 300,000 | 4.7 / 3.2K | 29 Jun 2026 | 10 messages/day, 100 runs total | $12/mo annual |
| Easy Scraper | 100,000 | 5.0 / 1.2K | 31 Oct 2025 | free, local only | no paid plan |
| Simplescraper | 60,000 | 4.4 / 364 | 25 Mar 2026 | unlimited single-page scrapes | not published as text |
| Listly | 100,000 | 4.7 / 952 | 5 Aug 2026 | 10 URLs/mo | $30/mo ($25 annual) |
| Pline | 1,000 | 4.2 / 10 | 21 Jul 2026 | 200 credits, 5 workflows | $39/mo ($29 annual) |
| AIScraper | 3,000 | 4.5 / 13 | 26 May 2026 | free starter credits | $6 for 200 credits |
Where the browser runs out
Extensions do not fail gradually. They fail at four specific walls, and three of them are written into Chrome itself.
The service worker dies after 30 seconds of inactivity. Manifest V3 replaced the persistent background page with an event-driven service worker. Chrome's lifecycle documentation gives three hard numbers. It shuts down after 30 seconds of idle. Any single request that takes longer than 5 minutes is terminated. A fetch whose response has not begun within 30 seconds counts as inactivity, not as work in progress. Well-written extensions route around this with ports and alarms. It is still the reason a long overnight run finishes at four in the morning with half the rows and no error.
Extension storage is 10 MB. chrome.storage.local caps at 10,485,760 bytes, up from 5 MB in Chrome 113 and earlier, unless the extension declares unlimitedStorage. A scrape that accumulates rows in memory or in local storage before you export has a ceiling you did not choose and cannot see.
One IP, one machine, one window. Every request comes from your home or office address, at your connection's speed, through a window that has to stay open. Suppose a listing site gives you a page every 2.5 seconds including load and parse, which is optimistic for anything with images. Ten thousand pages is nearly seven hours of a browser you cannot use for anything else, and seven hours of steady traffic from a single residential IP is a pattern anti-bot protection is specifically built to notice. When it does notice, you do not get a clean failure. You get a CAPTCHA on a page nobody is watching, and a CSV that is quietly short.
No retries, no schedule, no state. A run that dies at page 4,000 restarts at page one. There is no queue, no dead-letter list, no record of which URLs returned 404 and which returned a soft block. That bookkeeping is most of what a real crawler is, and it is exactly what the extension does not have. Once you want it, you want rotating proxies and scheduling too, and you have left the browser.
The honest boundary is around a few thousand pages, once, from a site that is not actively defending itself. Below that a browser extension is faster than anything you could write. Above it, every hour you save on setup you pay back twice in babysitting.
The logged-in trap
Most articles end with a paragraph saying scraping public data is generally legal, cite hiQ v. LinkedIn, and stop. For browser extensions specifically, that paragraph points in the wrong direction, because the thing extensions are best at is the thing the case law protects least.
The distinction that matters is logged in versus logged out. In Meta Platforms v. Bright Data, decided 23 January 2024 in the Northern District of California, Judge Edward Chen granted summary judgment to the scraper on Meta's breach-of-contract claim. The reasoning: Meta's terms govern "your use" of its products, Bright Data was not logged in, and so it was not using them. Public logged-off scraping fell outside the contract entirely.
Now look at what a scraper extension does. It runs inside your session, with your cookies, on pages you can see because you signed in. You accepted the terms. You are the party the contract binds, and the defence that worked for Bright Data is unavailable to you by construction. The feature every roundup lists as an advantage, including the earlier version of this one, is also the feature that moves you from the protected side of that line to the unprotected side.
hiQ is a warning, not a licence. hiQ won the famous ruling that the Computer Fraud and Abuse Act does not reach public data, then lost on breach of contract. The case ended in December 2022 with hiQ paying $500,000 and accepting a permanent injunction against scraping LinkedIn in violation of its user agreement, against creating fake accounts, and requiring the deletion of collected member data. Winning on the criminal statute and losing on the terms of service is the normal outcome, not a twist.
Personal data does not become fair game by being visible. The Dutch data protection authority fined Clearview AI €30.5 million on 16 May 2024 for building a facial-recognition database from photographs that were, in every case, publicly posted. Under the GDPR the question is whether you have a lawful basis, not whether the page required a password. Names, emails and phone numbers pulled from a directory into a CSV are personal data from the moment they land in your Downloads folder.
Four habits cover most of it. Read robots.txt and the terms before the first run, not after the complaint. Keep personal data out unless you can name your lawful basis in one sentence. Prefer logged-out pages when the data exists on both sides of the login. Install only from the Chrome Web Store, check the developer name and the last update date, and remove extensions you have stopped using, because an idle extension has exactly the same permissions as a busy one.
When it stops being a browser problem
At volume the question stops being which tool and becomes how much maintenance you are willing to own. Selectors break, sites redesign, blocks arrive, and someone has to notice on a Tuesday.
Cloud no-code scraping platforms are the first step out. Octoparse gives you 10 tasks and 50,000 exported rows a month free with local extraction. Cloud runs with IP rotation and scheduling start at $69 a month, and 20 concurrent cloud processes at $249. ParseHub and Apify, with its marketplace of ready-made actors, occupy the same ground.
API services such as ScrapingBee, ScraperAPI and Zyte API sell you the fetch and leave the parsing to you. That is the right trade when the hard part is getting a 200 back. Your own pipeline on Scrapy costs the most to build. It is also the only option that gives you full control of retries, scheduling and storage.
If the answer to the maintenance question is "as little as possible," the infrastructure decision is not yours to make. A managed data extraction service or data as a service delivers the rows on a schedule while somebody else owns the proxies, the browsers and the anti-bot handling.
How to choose
- One table, right now, nothing sensitive. Easy Scraper or Instant Data Scraper. Read the section above on what the second one now logs before you decide.
- A site with navigation, pagination and detail pages you will scrape again next month. Web Scraper. The sitemap is a file: you can diff it, share it, and fix it when the site changes, and none of the AI tools give you that.
- A well-known site somebody has already solved. Data Miner, then check the recipe's output against the page before trusting it.
- You do not want to think about selectors at all. Chat4Data for a few sites you revisit, Thunderbit if you will pay for it.
- Monitoring rather than extraction. HARPA AI.
- Clean data straight into a spreadsheet. Listly.
- Anything above a few thousand pages. Not an extension.
Corrections in this update
- Instant Data Scraper is no longer a Web Robots product and no longer local. Its current owner's privacy policy, dated 30 July 2026, describes collecting the URLs of pages you visit and transmitting them to its servers, and its terms forbid commercial use without written approval. The claim of an "optional Pro plan" is withdrawn; no pricing is published.
- Data Miner's recipe library is 50,000-plus recipes for 15,000-plus sites, not over a million scenarios.
- Chat4Data has 10,000 users, not hundreds of thousands. The Featured badge is genuine.
- Chrome has no "AI Permission Monitor." The real mechanism is Safety check on the extensions page, added in Chrome 117, which flags unpublished extensions, policy takedowns and malware.
- webscraper.io's marketplace does not include LinkedIn or Indeed sitemaps.
- Added the Manifest V2 store removal date of 31 August 2026, the Manifest V3 service worker and storage limits, Easy Scraper, Simplescraper and Listly, verified pricing throughout, and the logged-in distinction from Meta v. Bright Data.