Last updated: 8 November 2026
Attachment Haul is a Chrome extension published by Grout Labs. It downloads the attachments of an Asana task or project to your computer. This page explains what it reads, where that information goes and what it keeps.
Attachment Haul asks the Asana API, with your permission, for the list of tasks, sections and attachments in the task or project you choose. Chrome then downloads each file directly from Asana's storage into your Downloads folder. File contents never pass through any server of ours.
You connect Attachment Haul to Asana through Asana's own sign-in window (OAuth), with read-only access to projects, tasks and attachments. Asana requires a secret value to finish a sign-in, and that secret can't be kept inside an extension, so a small sign-in service of ours (a Cloudflare Worker) passes the sign-in codes and tokens between the extension and Asana. It only exchanges and renews sign-in tokens. It stores nothing, logs no codes or tokens, and never sees your files or your Asana data.
Whole-project exports need a licence. Polar (polar.sh) sells it as the merchant of record, so Polar, not Grout Labs, handles your payment details, tax and receipts under its own privacy policy. To activate and check a licence, the extension sends Polar your licence key and a label for this browser, such as "Chrome on Win32, added 2026-11-05", so you can recognise it in Polar's licence portal.
Attachment Haul has no analytics, no tracking, no advertising and no remote code. Grout Labs doesn't collect, sell or share your data.
Like any website, the services the extension talks to see the basic details of each request: your IP address, the time, and your browser's name and version. Asana sees the requests made to its API, as it does when you use Asana. Cloudflare, which runs our sign-in service, and Polar, which checks licences, see the requests made to them and handle those details under their own privacy policies. Our sign-in service has request logging turned off, and Grout Labs doesn't keep these details.
To clear it: "Disconnect" under History and settings signs out of Asana (and revokes the sign-in at Asana) and clears the history. "Clear history" clears only the history. "Remove from this browser" removes the licence. Removing the extension from Chrome deletes everything it stored. Downloaded files stay in your Downloads folder until you delete them.
Attachment Haul hides Chrome's downloads bubble while an export saves files, and shows it again when the export stops, so the bubble doesn't fill with hundreds of files. This uses Chrome's "downloads.ui" permission and doesn't change any other Chrome setting.
Attachment Haul's use of information received from Asana is limited to downloading the attachments you ask for and listing them in an index file on your computer. The use and transfer of that information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. It is not used for advertising, not sold, not transferred to anyone else and not read by people.
Attachment Haul works with Asana and is not affiliated with or endorsed by Asana. Asana is not responsible for the privacy, security or integrity of any User Content outside of the Service.
If this policy changes, the new version will be posted here with a new date, and the extension will ask for your agreement again before the next export if the change affects you. Questions: groutlabs.dev@gmail.com.