Privacy Policy

Recording sessions, screenshots and generated guides are written to a SQLite database and a screenshot folder inside your own user data directory. Credentials the app needs are stored in your operating system's keychain. None of it is transmitted anywhere as part of normal use.

The desktop app has no account system. There is nothing to sign up for and no profile held on our side.

Two things, and only when you cause them. First: generation. When you press Generate, the redacted trace and redacted screenshots for that session are sent to whichever AI transport you configured — either a CLI running locally on your own machine, or the API of the provider whose key you pasted in. That request goes to them under your account, on your terms of service, not through us.

Second: export and publish. When you export a guide, the file is written where you choose. If a hosted publishing option exists in your version and you use it, that upload happens on your explicit action.

Redaction runs before generation, so whatever ran the writing was given the redacted material and nothing else.

The extension captures the page you are recording and sends it to the desktop app over a token-authenticated connection to 127.0.0.1 — your own machine, not a server. The relay rejects any request whose origin is not the extension itself, and the two must be paired by you clicking Allow inside the app window.

Values the extension harvests during replay are held in memory for the duration of the confirmation prompt and are never written to extension storage, to a guide file, or to a log.

Redaction is destructive by design. Matched regions are filled with opaque pixels in the stored image and matched values are replaced in the stored trace. Nothing is merely hidden behind an overlay, and there is no way to recover a redacted value from an artifact the app produced.

Automatic detection is heuristic and will miss things, which is why a human review pass is mandatory and blocks generation, export and publishing until it is acknowledged.

If analytics are enabled on this site, they collect aggregate page-view data only. No recording, guide, or anything from the desktop app is visible to this website at any point.

Questions about any of the above, or a correction to make: get in touch through stoicsoft.com.