-
Notifications
You must be signed in to change notification settings - Fork 221
how to scrape into a database playwright
To scrape into a SQLite database with Playwright without accumulating duplicates,
give each entity a natural key drawn from stable page content, declare that key
UNIQUE, and write every row as an INSERT ... ON CONFLICT DO UPDATE upsert inside
one transaction per page. A re-crawl then updates rows in place instead of appending
them, so the database stays a current catalog rather than a log of visits.
A first crawl is easy: loop the pages, pull the rows, append them somewhere. The problem shows up on the second crawl. You re-visit the same catalog a week later to refresh prices, and every product you already had comes back again. Append it and you now have two of everything. Do that weekly and the database stops being a catalog and becomes a log of visits.
This page is about writing a Playwright crawl into SQLite so that the second run, and the fiftieth, leave the database as a clean current picture rather than a growing pile. The structural tools are a natural key and an upsert. The operational tool is one transaction per page. The stealth tool, specific to refresh crawls, is a fixed seed so the return visit looks like the same client coming back rather than a new machine touching every item.
The first crawl has no conflicts because the table is empty. Correctness questions only appear once a row can already exist.
Re-crawling to refresh means the same real-world entity appears again under whatever identifier the page gives it. If your primary key is a row number or an insertion order, the database has no way to know that this product is the same product it stored last week, so it stores it twice. Nothing errors. The table just doubles, then triples, and any count you run against it is wrong in a way that looks plausible.
The fix is to decide, before the first insert, what makes a row the same row across visits. That identifier is the natural key, and it is what the rest of this page hangs on.
A natural key is a value the page itself carries that identifies the entity and does not change between visits. A product code, a listing slug, a permanent item URL. It is the thing you would use to say "this is the same product" if you were reconciling by hand.
The one rule that matters here: derive the key from stable content, never from position. The order that items appear in a listing reorders constantly. Sort changes, new arrivals push everything down, a promoted item jumps to the top. If you key on "third card on page two", then next week the third card on page two is a different product, your upsert overwrites the wrong row, and you have silently corrupted two records at once. Position is the most tempting key because it is always available, and it is the one that will hurt you.
import hashlib
def natural_key(item_url: str) -> str:
"""A stable id for one entity, derived from page content, not row order.
Prefer an explicit id the page already exposes (a product code, a
canonical URL). Hash it only to get a fixed-width, index-friendly key.
"""
canonical = item_url.split("?")[0].rstrip("/").lower()
return hashlib.sha1(canonical.encode("utf-8")).hexdigest()If the page exposes an explicit product code, use that directly and skip the hash. The hash is only there to turn a messy URL into a fixed-width column that indexes well.
The database enforces "one row per entity" for you, if you tell it what an entity is.
Declare the natural key UNIQUE (or PRIMARY KEY), and then every write is an
INSERT ... ON CONFLICT ... DO UPDATE: insert when the entity is new, update in place
when it is already there. That single statement is what makes the crawl idempotent. Run
it once or run it ten times, the table ends up the same.
import sqlite3
def open_db(path: str = "catalog.db") -> sqlite3.Connection:
conn = sqlite3.connect(path)
conn.execute("PRAGMA journal_mode=WAL") # readers do not block the writer
conn.execute("""
CREATE TABLE IF NOT EXISTS product (
key TEXT PRIMARY KEY, -- the natural key
url TEXT NOT NULL,
title TEXT,
price_cents INTEGER,
first_seen TEXT NOT NULL,
last_seen TEXT NOT NULL
)
""")
return conn
UPSERT = """
INSERT INTO product (key, url, title, price_cents, first_seen, last_seen)
VALUES (:key, :url, :title, :price_cents, :now, :now)
ON CONFLICT(key) DO UPDATE SET
url = excluded.url,
title = excluded.title,
price_cents = excluded.price_cents,
last_seen = excluded.last_seen
"""Note what the conflict clause does not touch: first_seen keeps its original value on
update, so the row remembers when you first saw the entity, while last_seen and the
mutable fields move forward. That is the difference between a current catalog and an
append-only log, expressed in one statement. The database is now the source of truth
across every incremental run, not a transcript of them.
Commit once per page and a crash mid-crawl rolls back cleanly: a partial page never lands in the table, and a re-run heals the gap because every write is an upsert.
A crawl fails partway for ordinary reasons: the network drops on page forty, the process is killed, a parse throws on a malformed card. The question is what state the database is in when that happens.
Commit once per page and the answer is clean. Every row from a page lands together or none of it does, so an interrupted run leaves fully written pages behind and the page it died on simply is not there yet. Re-run the crawl and, because every write is an upsert, the completed pages update harmlessly and the missing page fills in. No half-written page, no duplicated rows from a partial retry, no manual cleanup.
from datetime import datetime, timezone
def save_page(conn: sqlite3.Connection, items: list[dict]) -> None:
"""All rows from one page commit together, or none do."""
now = datetime.now(timezone.utc).isoformat()
with conn: # BEGIN ... COMMIT, or ROLLBACK on any exception
for it in items:
conn.execute(UPSERT, {
"key": natural_key(it["url"]),
"url": it["url"],
"title": it["title"],
"price_cents": it["price_cents"],
"now": now,
})The with conn: block is the whole mechanism. SQLite opens a transaction and commits it
if the block exits normally, or rolls the entire block back if anything raises. Keep the
unit of work at one page: small enough that a failure costs you one page to redo, large
enough that you are not paying a commit per row.
Drive the browser with ordinary Playwright and pass a fixed seed so each refresh returns
as the same client. The extraction runs in a real Firefox driven by stock Playwright, and
the browser you get back is a real Playwright Browser, so the page-driving code below
is ordinary Playwright.
from invisible_playwright import InvisiblePlaywright
def extract_items(page) -> list[dict]:
page.wait_for_selector("[data-product]")
return page.eval_on_selector_all("[data-product]", """
cards => cards.map(c => ({
url: c.querySelector('a.item').href,
title: c.querySelector('.title').textContent.trim(),
price_cents: Math.round(
parseFloat(c.querySelector('.price').dataset.amount) * 100
),
}))
""")
def refresh_catalog(seed: int = 42, pages: int = 20) -> None:
conn = open_db()
# A fixed seed: the refresh weeks later is the SAME client returning.
with InvisiblePlaywright(seed=seed) as browser:
page = browser.new_page()
for n in range(1, pages + 1):
page.goto(f"https://example.com/catalog?page={n}")
save_page(conn, extract_items(page)) # one commit per page
conn.close()
if __name__ == "__main__":
refresh_catalog()Here is why the seed matters for an update crawl specifically, and not just for debugging. The whole point of a refresh is that the same site sees you come back. If every run drew a fresh random identity, then from the site's side a brand-new machine, with a different GPU, different fonts and a different canvas hash, would appear each week and walk the entire catalog end to end. That pattern is more conspicuous than a returning visitor, not less. A fixed seed makes every field the identity implies come back identical, so the second pass presents a byte-identical fingerprint to the first: one client that checks back periodically, which is what an ordinary returning user looks like. The quickstart shows the seed round-trip, and pinning specific fingerprint fields covers forcing one value while the rest stay seed-derived.
One honest caveat. A stable fingerprint controls what the browser looks like across runs; it does not control the cadence. If you re-crawl a large catalog every hour from one address, the fingerprint being consistent will not hide the fact that a single client is fetching thousands of pages on a machine schedule. The identity should be steady; the request rate should look human, which is a separate control covered in how to rate-limit your scraper.
The database part of a recurring crawl is three decisions made once. Choose a natural key from stable page content, never from row position. Declare it unique and write every row as an upsert, so a re-crawl updates in place instead of duplicating. Commit one transaction per page, so an interrupted run rolls back to a clean page boundary and a re-run heals it. Do that and the database stays the current truth across every incremental refresh.
The stealth part is one decision: pass a fixed seed, so the refresh weeks later is the same client returning rather than a new machine discovering the whole catalog again. Both halves are pulling in the same direction, which is idempotence. The crawl should be safe to run again, and it should look like it was.
How do I stop my scraper inserting duplicate rows on every run? Give the table a
unique natural key and write with INSERT ... ON CONFLICT(key) DO UPDATE. The re-crawl
then updates the existing row instead of adding a second one.
What should the natural key be? A stable value the page carries: a product code, a canonical item URL, a permanent slug. Never a row number or list position, because those reorder between visits and you will overwrite the wrong record.
Why one transaction per page? So a crash leaves whole pages committed and the failed page absent, instead of a half-written page. Combined with upserts, re-running the crawl finishes it cleanly with no manual repair.
Do I need Postgres for this? No. SQLite handles ON CONFLICT upserts and
transactions fine for single-writer crawls. Turn on WAL mode so a reader can query while
the crawl writes.
Why keep a first_seen and last_seen column? So the row records when the entity first
appeared and when you last confirmed it, which an append-only table cannot tell you. The
conflict clause updates last_seen and leaves first_seen alone.
Does re-crawling with the same identity get me flagged? A consistent fingerprint looks like a returning visitor, which is what you want. What gets flagged is cadence, one client fetching a whole catalog on a fixed schedule, so pace the requests separately.
- SQLite documentation on
ON CONFLICTupsert semantics and transaction behaviour, and the WAL journal mode used above. - This project's own API: the seed-to-identity round-trip from the quickstart, verified against the reproducible-fingerprint behaviour where one seed yields a byte-identical fingerprint on a later run.
See also: how to scrape paginated pages for walking the catalog a refresh crawl writes into a database, how to scrape only new items incrementally for skipping rows you already have, and the quickstart for the two-line switch and the seed round-trip.
Written while maintaining invisible_playwright, a Firefox patched at the C++ level driven by stock Playwright. The duplicate-row problem here is one I shipped before I fixed it, which is why the natural key comes first.
Documentation
Guides
-
Browser Identity
- navigator.webdriver is not the tell you think it is
- hardwareConcurrency, deviceMemory and storage quota
- Screen size and viewport tells in headless browsers
- Playwright headless vs headed: what detectors see
- Playwright User Agent: Why You Should Not Set It
- Client Hints and Sec-Fetch: headers that must agree
- Codec fingerprinting: canPlayType and MediaCapabilities
- Permissions API: the two answers that must agree
- CSS fingerprinting: what media queries reveal
- What privacy.resistFingerprinting actually does
- speechSynthesis.getVoices() returns an empty array
- Browser extensions are a fingerprint surface
- BFCache and pageshow.persisted under browser automation
- Service workers, storage partitioning and automation
- Web Workers: where page-level fingerprint patches fail
- fake-useragent is archived: what changes and what doesn't
- navigator.buildID and the stale build date tell
- navigator.maxTouchPoints and pointer consistency
- navigator.platform and oscpu on a spoofed OS
- navigator.vendor and productSub: the Firefox tells
- Accept-Language header vs navigator.languages
- window.devicePixelRatio: the pref that spoofs it
- Can you be fingerprinted in incognito mode?
- Is changing the user agent enough to avoid detection?
- Can a website tell you are running on a server?
- Can two devices share a browser fingerprint?
- Does clearing cookies stop fingerprint tracking?
- Color-gamut and HDR media queries as a fingerprint
- Battery API fingerprint: does Firefox expose it?
- Is navigator.connection a fingerprint in Firefox?
- Can the Gamepad API fingerprint or detect a bot?
- Do accelerometer and gyroscope APIs leak on desktop?
- prefers-reduced-motion and other OS-setting tells
- Does storage quota estimate reveal disk size?
- Can scrollbar width reveal my operating system?
-
Canvas, WebGL, Fonts and Audio
- Canvas fingerprint noise: why per-call randomising fails
- Firefox WebGL renderer strings: what ANGLE reports
- WebGL parameters: the numbers are the same on every GPU
- Your renderer string says NVIDIA. Your pixels say software.
- Why headless browsers render different fonts
- How to make Linux and macOS report real Windows fonts
- measureText and TextMetrics as a fingerprinting surface
- AudioContext fingerprinting, and why adding noise backfired
- Canvas and WebGL fingerprints, identical across OSes
- Emoji fingerprinting: why emoji look the same on any OS
- Detecting installed fonts in JavaScript by width
- WebGL shader precision as a fingerprint surface
- AudioContext sampleRate and latency as a fingerprint
- Is WebGPU a browser fingerprint?
-
Network, Proxy and WebRTC
- WebRTC leak with a proxy in Playwright and Selenium
- WebRTC ICE candidate spoofing: the fields that give it away
- Playwright proxy in Python: per-context, and what leaks
- Playwright proxy not working? SOCKS5 auth in Python
- Playwright timezone does not match the proxy IP
- JA3 and JA4: why a TLS fingerprint cannot be patched
- Playwright in Docker: it runs, and still gets blocked
- Web scraping keeps getting blocked with good proxies
- Python web scraping blocked? The TLS fingerprint reason
- SOCKS5 vs HTTP proxy: what each does in the browser
- WebRTC IPv6 leak: why a proxy does not stop it
- HTTP/2 fingerprint: the layer above the TLS handshake
- TLS fingerprint vs User-Agent: the contradiction
- WebRTC has no ICE candidates behind a proxy
- WebRTC IP that matches the proxy exit, by design
- How to check if a proxy leaks your real IP
- about:webrtc: read your real ICE candidates
- Offline timezone resolution from a proxy exit IP
- Residential vs datacenter vs mobile proxies explained
- Sticky vs rotating proxy sessions: which to use
- Does a proxy leak DNS? DoH and DNS leaks explained
- HTTP/3 and QUIC fingerprint: what a site sees
- What is ASN and IP reputation in bot detection?
- What does a mobile carrier IP look like to a site?
- IPv6 vs IPv4: which does your proxy expose?
- Geolocation API vs IP location: keep them consistent
- Does chaining two proxies help avoid detection?
-
The Automation Layer
- Function.prototype.toString and the [native code] check
- The ChromeDriver
cdc_variable, and why renaming it fails - Why an attached debugger makes automation detectable
- Execution context was destroyed, and when it means detection
- Human-like mouse movement: Bezier curves are the easy part
- Why a Playwright upgrade broke 97 of 133 tests overnight
- Playwright persistent profile: what it fixes and breaks
- Why humanized mouse movement can fail on hover()
- Why content_frame() returns None for a cross-origin iframe
- Orphaned Firefox processes on Windows: the killed-runner leak
- Firefox launches but Playwright can't drive it: packaging gap
- Why automating login is riskier than reusing a session
- Playwright new_page vs new_context: the viewport tell
- Playwright dialog and popup handling without a tell
- Playwright download files with Firefox and the tell
- Playwright connect_over_cdp does not work with Firefox
- Playwright mobile emulation on Firefox and isMobile
- Playwright isTrusted: are automated clicks real?
- Playwright set_input_files uploads and the tell
- Can websites detect Playwright? What is actually visible
- Does Playwright Set navigator.webdriver to True?
- Does Playwright Leave Traces a Website Can See?
- Does Playwright Change My Browser Fingerprint?
- Can I Use My Real Browser Profile With Playwright?
- Does Playwright Support Firefox Stealth?
- Is Playwright Firefox Harder to Detect Than Chromium?
- Does Playwright Get Detected on the First Request?
- Why Playwright's bundled Firefox is easy to detect
- ghost-cursor human mouse paths with Playwright
- Stock Playwright, patched Firefox: how they connect
- Intercept and mock network requests with page.route
- Record and replay HTTP traffic with HAR in Playwright
- Record a Playwright trace to debug a failed scrape
- Record a video of a Playwright browser session
- Save and reuse login with storage_state in Playwright
- Read and set cookies in a Playwright context
- Set geolocation and permissions per Playwright context
- Handle HTTP basic auth in Playwright (http_credentials)
- Isolate identities with a browser context per session
- Drag and drop elements in Playwright with drag_to
- When to use an HTTP client vs a real browser
- Migrating from requests + BeautifulSoup to a browser
-
AI Agents and Frameworks
- AI browser agents and stealth: what fits and what does not
- browser-use gets detected: what you can and cannot change
- crawl4ai stealth mode and custom browser engines
- Give a LangChain agent an invisible_playwright browser
- Feed invisible_playwright pages into a RAG index
- Computer-use agents and browser fingerprint detection
- Give an MCP browser server a stealth Firefox engine
- Give each AI agent a reproducible browser identity
- Run parallel browser agents with distinct fingerprints
- Why AI browser agents have their own timing signal
- Running an AI browser agent headless on a server
- Give a browser agent a persistent logged-in session
- smolagents: hand the agent an invisible_playwright tool
- Stagehand and stealth: why a Firefox engine won't drop in
- DOM-reading vs screenshot agents: which stealth helps
- Back a computer-use agent with a real browser engine
- AI agent retry loops trip rate limits, not fingerprints
-
Detectors, Explained
- What bot.sannysoft.com actually checks, row by row
- How CreepJS decides you are lying
- What BotD actually detects, and what it does not
- Why a FingerprintJS visitor ID changes
- reCAPTCHA v3 score: why a fresh browser scores badly
- BrowserLeaks canvas and WebGL hash, explained
- What BrowserLeaks actually tests, surface by surface
- Browser trust scores explained: what the number means
- How do websites detect bots?
- What is a browser fingerprint?
- What data does a website collect about your browser?
- Does a VPN stop browser fingerprinting?
- Do websites know you are using a script?
- How accurate is browser fingerprinting?
- Can a website detect a virtual machine?
- Can websites detect a datacenter or proxy IP?
- getClientRects fingerprinting: subpixel geometry as ID
- Notification.permission as a bot-detection signal
- speechSynthesis voices as a cross-platform fingerprint
- Can a website detect typing by keystroke timing?
- Can a website detect Clipboard API access?
- What are mouse-dynamics behavioural biometrics?
-
Testing and Troubleshooting
- How to test bot detection without a false pass
- Playwright detected as a bot: the checklist to fix it
- Firefox preferences that silently do nothing
- Slow browser launch: a per-request timeout is not a budget
- Playwright screenshot returns noise: readback fix
- Canvas fingerprint changes every run: use a seed
- Playwright TargetClosedError: the causes and the fixes
- Why am I blocked with a clean fingerprint?
- Why Does My Playwright Script Get Blocked?
- Is Playwright headless detectable? What sites check
- Can You Run Playwright Without Being Detected?
- Why Playwright Works Locally but Fails in the Cloud
- Does Playwright Trigger reCAPTCHA More Often?
-
Scraping with Playwright
- How to scrape without getting blocked
- How to scrape a site that blocks headless browsers
- How to scrape infinite scroll pages with Playwright
- How to rotate proxies when scraping with Playwright
- How to scrape data behind a login with Playwright
- How to run Playwright in Docker without getting detected
- How to use invisible_playwright in Docker
- Playwright bot detection: how to avoid it in Python
- How to scrape paginated pages with Playwright
- How to download files with Playwright
- How to upload files with Playwright, and verify it landed
- How to handle cookie consent banners in Playwright
- How to handle popups and modals in Playwright
- How to take full-page screenshots with Playwright
- How to generate a PDF with Playwright and Firefox
- How to wait for content to load in Playwright
- How to retry failed requests when scraping Playwright
- How to scrape pages in parallel with Playwright
- How to rate limit your own Playwright scraper
- How to scrape HTML tables with Playwright
- How to scrape iframe content with Playwright
- How to scrape shadow DOM content with Playwright
- How to capture XHR and API responses in Playwright
- How to scrape geotargeted content with Playwright
- How to scrape real estate listings with Playwright
- How to scrape job postings with Playwright
- How to scrape e-commerce product pages with Playwright
- How to track product prices with Playwright
- How to scrape hotel room prices with Playwright
- How to scrape flight prices with Playwright
- How to scrape classifieds listings with Playwright
- How to scrape vacation rental listings with Playwright
- How to scrape car listings with Playwright
- How to scrape apartment rentals with Playwright
- How to track product stock and restocks with Playwright
- How to scrape location-based store prices with Playwright
- How to scrape flexible-date fare calendars with Playwright
- How to scrape product reviews with Playwright
- How to scrape reviews and ratings with Playwright
- How to scrape news article text with Playwright
- How to scrape business directory listings with Playwright
- How to scrape event and ticket listings with Playwright
- How to scrape restaurant menu data with Playwright
- How to scrape stock and financial data with Playwright
- How to scrape social media profiles with Playwright
- How to scrape forum and community threads with Playwright
- How to scrape image galleries with Playwright
- How to scrape video listings and metadata with Playwright
- How to scrape map-based local results with Playwright
- How to scrape sports scores and stats with Playwright
- How to scrape cryptocurrency prices with Playwright
- How to scrape deals and coupon codes with Playwright
- How to scrape to CSV with Playwright
- How to scrape to JSON Lines with Playwright
- How to scrape into a SQLite database with Playwright
- How to export scraped data to Excel with Playwright
- How to extract JSON-LD structured data with Playwright
- How to extract Open Graph and meta tags with Playwright
- How to extract links and build a crawl frontier in Playwright
- How to scrape RSS and Atom feeds with Playwright
- How to download images in bulk with Playwright
- How to extract clean article text with Playwright
- How to scrape a sitemap.xml with Playwright
- How to scrape into a pandas DataFrame with Playwright
- How to clean scraped prices and dates with Playwright
- Scrape search results by driving a form in Playwright
- Scrape a map-based search with Playwright
- Scrape autocomplete and typeahead inputs with Playwright
- Scrape date-picker calendars with Playwright
- Crawl list pages to detail pages with Playwright
- Scrape lazy-loaded images with Playwright
- Extract data from canvas charts with Playwright
- Scrape a multi-step wizard flow with Playwright
- How to resume an interrupted scrape with Playwright
- Incremental scraping: only new items since last run
- Handle 403 and 429 backoff mid-scrape in Playwright
- Scrape load-more button pages with Playwright
- Scrape nested pagination with Playwright
- Scrape an SPA that changes URL via history API
- Use BeautifulSoup with invisible_playwright
- Run stealth Playwright tests with pytest fixtures
- Run invisible_playwright concurrently with asyncio
- Run invisible_playwright in GitHub Actions CI
- Can you run invisible_playwright serverless?
- Run invisible_playwright in Celery task workers
- Schedule invisible_playwright scrapes with cron
- Run invisible_playwright headful on a server with Xvfb
- Use invisible_playwright in an Airflow DAG
- Combine invisible_playwright with httpx for speed
- Wrap invisible_playwright in a FastAPI service
- Run invisible_playwright in a Jupyter notebook
- Block images to speed up scraping (and when not to)
- Wait for a specific API response in Playwright
Comparisons
- Playwright stealth in Python: three levels that work
- Firefox or Chromium for anti-detect automation
- Chromium is not Chrome, and detectors know the difference
- Playwright stealth vs Camoufox: two patched Firefoxes
- Playwright stealth vs Patchright: driver vs engine
- Playwright stealth vs undetected-chromedriver and nodriver
- playwright-stealth vs a patched engine: page vs browser
- puppeteer-extra-plugin-stealth: unmaintained since 2024
- selenium-stealth hasn't been updated since December 2021
- pyppeteer's own maintainer says to switch to Playwright
- invisible_playwright vs rebrowser-patches: the same CDP fix
- invisible_playwright vs fingerprint-suite: injection vs engine
- invisible_playwright vs playwright-with-fingerprints
- invisible_playwright vs Scrapling
- invisible_playwright vs Ulixee Hero
- invisible_playwright vs SeleniumBase UC Mode
- Splash is unmaintained, and it was never a real browser
- invisible_playwright vs DrissionPage
- WebDriver BiDi vs CDP: does the new protocol hide you
- invisible_playwright vs hrequests
- zendriver vs invisible_playwright: Chrome CDP vs Firefox
- botasaurus vs invisible_playwright: framework vs library
- curl_cffi vs invisible_playwright: TLS client vs browser
- pydoll vs invisible_playwright: CDP without a driver
- selenium-driverless vs invisible_playwright stealth
- puppeteer-real-browser vs invisible_playwright
- Migrating from Selenium to Playwright for stealth
- Migrating from Puppeteer to Playwright for stealth
- undetected-chromedriver vs a patched Firefox browser
- scrapy-playwright vs a patched Firefox for stealth
- playwright-extra stealth plugins vs a patched browser
- tls-client vs a real browser: when TLS is enough
- Anti-detect browser or Playwright stealth: which you need
- undetected-playwright vs a patched Firefox binary
Integrations
- Using invisible_playwright with CodeceptJS
- Using invisible_playwright with Crawlee for Python
- Using invisible_playwright with Crawlee for JavaScript
- Using invisible_playwright with scrapy-playwright
- Using invisible_playwright with Robot Framework Browser
- Cypress, WebdriverIO, TestCafe and Nightwatch integration
- Using invisible_playwright with Microsoft's Playwright MCP
- Using the engine from Go, Java, C#, Ruby and Rust
docs/ source folder