Privacy Policy

Last updated: April 12, 2026

Introduction

DevRecorder ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website at devrecorder.com and our Chrome extension.

Information We Collect

Account Information

When you sign in with Google, we collect:

  • Your name
  • Email address
  • Profile picture
  • Google account ID

Recording Data

When you use the DevRecorder extension, we collect and store:

  • Screen recordings (video files)
  • Console logs (log, warn, error, info, debug messages from the browser console)
  • Uncaught errors and unhandled promise rejections
  • Network requests via Fetch and XMLHttpRequest (URLs, HTTP methods, status codes, request/response bodies for JSON, text, XML, and HTML responses under 100KB)
  • Navigation events (page URLs visited during the recording)

Automatic Sensitive Data Redaction

DevRecorder automatically redacts sensitive fields from network request and response bodies before they are stored. The following field names are detected and replaced with [REDACTED]:

  • password, passwd, secret
  • token, access_token, refresh_token
  • api_key, apikey, api_secret
  • authorization
  • credit_card, card_number, cvv
  • ssn, private_key

This redaction applies to JSON request and response bodies in network requests. It is performed client-side before data leaves your browser.

What We Do NOT Capture

  • Passwords or form field inputs (form submissions are not intercepted)
  • Keystrokes or mouse movements
  • Cookies, localStorage, or sessionStorage contents
  • Data from tabs or windows you are not recording
  • Browsing history, bookmarks, or saved passwords
  • Files on your local machine or clipboard contents
  • Data from other browser extensions
  • Any data when you are not actively recording
  • Binary response bodies (images, videos, PDFs, etc.)
  • Response bodies larger than 100KB

Important: While we automatically redact known sensitive fields, recording data may still contain information from the websites you are browsing (such as visible page content in the video). You are responsible for ensuring you do not record confidential business data or personal information of others without proper authorization.

Payment Information

Payments are processed by Polar. We do not store your credit card information. Polar may collect payment details in accordance with their own privacy policy.

How We Use Your Information

  • To provide and maintain the DevRecorder service
  • To authenticate your account
  • To store and display your recordings
  • To manage your subscription and plan
  • To communicate with you about your account or service updates

Data Storage

  • Account data and recording metadata are stored in MongoDB Atlas
  • Video files are stored in Cloudflare R2 object storage
  • All data is transmitted over HTTPS

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following cases:

  • Public recordings: If you make a recording public, anyone with the link can view the video and associated debug data.
  • Service providers: We use third-party services (MongoDB Atlas, Cloudflare R2, Polar) to operate DevRecorder. These providers have access to data only as necessary to perform their services.
  • Legal requirements: We may disclose information if required by law or to protect our rights.

Data Retention

Your recordings and account data are retained as long as your account is active. When you delete a recording, the video file and all associated event data are permanently removed. If you wish to delete your account entirely, please contact us.

Chrome Extension Permissions

The DevRecorder Chrome extension requires the following permissions:

  • desktopCapture: To record your screen
  • tabs & activeTab: To identify the page being recorded
  • webRequest & webNavigation: To capture network requests and navigation events
  • storage: To store your authentication token locally
  • scripting: To inject content scripts for console log capture

These permissions are used solely for the recording functionality. We do not collect data when you are not actively recording.

Your Rights

You have the right to:

  • Access your personal data
  • Delete your recordings at any time
  • Request deletion of your account and all associated data
  • Control whether your recordings are public or private

Cookies & Analytics

We use the following types of cookies:

  • Essential cookies: Required for authentication and session management. These cannot be disabled.
  • Analytics cookies (Google Analytics): We use Google Analytics to understand how visitors interact with our website, including page views, scrolls, and outbound clicks. These cookies are only set after you provide consent via our cookie banner.

You can change your cookie preferences at any time by clearing your browser's local storage for devrecorder.com.

What We Do NOT Collect

  • We do not use advertising or retargeting cookies
  • We do not collect data when you are not actively recording
  • We do not access your browsing history, bookmarks, or other browser data
  • We do not collect passwords, form inputs, or keystrokes
  • We do not sell or share personal data with advertisers
  • We do not fingerprint your device or track you across other websites

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@devrecorder.com.