Privacy Policy
Last updated: June 29, 2026
StepRecorder is a Chrome extension that records your browser interactions and replays or exports them as Playwright/Cypress tests and screenshots. This policy explains exactly what data the extension handles. The short version: your recordings stay on your device and are never sent to us.
What stays on your device
- Your recordings. The steps you record (the CSS selectors of elements you interacted with, the values you typed, navigation URLs, and any screenshots captured for the screenshot strip) are stored in your browser's local storage on your device. They are never transmitted to us. Exports (Playwright/Cypress/JSON/PNG) are generated locally and saved by you.
- Secrets are masked at capture. Values typed into password fields, and fields that look like card numbers, CVV/CVC, OTP/one-time codes, or API keys/tokens, are redacted before a step is stored, shown, exported, or replayed. URLs captured for navigation steps have known secret query parameters (tokens, OAuth
code, session ids, emails) replaced withREDACTED. You can also manually redact or edit any step. Masking is best-effort heuristics — review a recording before sharing it. - Local settings. Your Pro license key (if entered) and a random device identifier are stored locally.
Network requests
- License validation contacts our server. When you activate or re-check a Pro license, the extension sends to our licensing service (operated on Cloudflare) your license key, a random device identifier (used to enforce the per-license device limit; not tied to your identity), and the product name ("steprecorder"). Nothing else is transmitted, and the free version never contacts our server.
- No recording data is ever sent. The license call contains no part of your recordings, page content, selectors, typed values, or screenshots.
Permissions
- activeTab — lets the recorder panel attach to the current page only after you click the toolbar icon.
- scripting — injects the recorder/replayer into the current tab when you invoke it.
- storage — stores your recordings, license key, and settings locally.
- optional host access (all sites) — off by default. You can enable it in Settings only to allow cross-page replay (replaying a recording that spans multiple page loads) and per-step screenshots. It is used solely to re-attach the replayer after a navigation; you can revoke it at any time.
Purchases
Payments for StepRecorder Pro are processed by Paddle, the Merchant of Record and data controller for your payment information. We do not see or store your card details. From a completed purchase we receive your email address and a transaction identifier, used to issue your license key and provide support. See Paddle's privacy policy.
What we do not do
- We do not sell or rent your data.
- We do not use your data for advertising or profiling.
- We do not include third-party analytics or tracking in the extension.
StepRecorder's use of information complies with the Chrome Web Store Limited Use requirements.
Data retention & your rights
Recordings and local data are removed when you clear the extension's storage or uninstall it. The in-panel Clear button discards the current recording. License records (key, purchase email, device activations) are kept while the license is active. To request access to or deletion of your license data, email us.
Contact
Questions or requests: [email protected].