ReproClip is a browser extension and web app for recording bug reports. This policy explains what we collect, why, where it is stored and how long we keep it. "We" means PT. Solusi Hidup Mudah, a company registered in Indonesia, which runs ReproClip. Questions go to [email protected].
The short version
- The extension records only when you press record or take a screenshot, and uploads only when you press save.
- Passwords, tokens, cookies, authorization headers and card numbers are replaced with
[REDACTED]in your browser, before anything is uploaded. Input values are never recorded. - Paid plans keep recordings until you delete them; on Free, videos and screenshots are deleted after 60 days.
- We do not sell data, show ads, use analytics trackers, or train AI models on your recordings.
What we collect
Your account
You sign in with Google or GitHub. We receive your name, email address and profile picture from them, and never your password. We also store the workspaces you belong to, your role in each, the invitations you send, and the extension connections you create.
Recordings and screenshots
When you save a recording or screenshot, the extension uploads:
- the video of the tab, window or screen you chose (with your microphone only if you turn it on, never a webcam), or the screenshot with your annotations;
- console messages and JavaScript errors from the recorded tab;
- network requests from the recorded tab (fetch and XHR): URL, method, status, timing, headers and bodies, after redaction; other resource loads (scripts, images, stylesheets and similar) as URL, type, status, timing and size only; WebSocket connections as open, close and error points with message counts and sizes, never message contents;
- clicks (the clicked element and its visible text) and page navigations; typed text is never recorded;
- environment details: page URL and title, browser, operating system, screen and window size, language, time zone and connection type;
- the title and description you write.
Recordings can show whatever was on your screen, including other people's personal data. Record only what you are allowed to
share, and use the workspace's redaction rules or the data-reproclip-mask and data-reproclip-block
attributes to hide sensitive parts of your own app.
What stays in your browser
To include the moments before you press record, the extension keeps the last two minutes of console and network events of the tab you are looking at in that tab's memory; a tab in the background keeps nothing. This buffer is never uploaded unless you record that tab and save the recording, and it is gone when the tab closes. Unsaved drafts stay in the extension's local storage until you save or discard them. The extension's sign-in token is kept in the extension's local storage and is sent only to ReproClip.
Billing
Payments are handled by Paddle, our merchant of record. Paddle collects your card or other payment details and billing address; we never see them. We receive your plan, subscription status, invoices and the country needed for tax.
Technical data
Our servers receive your IP address and browser user agent with every request. We use them for security, rate limiting and fixing errors, and they appear in short-lived server logs. When something fails on our servers, an error report with the page address and the technical details goes to Sentry, without your IP address, cookies or account.
Cookies
We use only the cookies needed to run the app: a session cookie, a "remember me" cookie that keeps you signed in, and a cookie that protects forms against cross-site requests. There are no analytics or advertising cookies, so we do not ask for cookie consent.
Why we use it
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Running your account, workspaces and recordings | Account, recordings | Contract |
| Billing and tax | Billing | Contract, legal obligation |
| Emails about invitations, quotas and recordings about to be deleted | Account | Contract |
| Security, abuse prevention and fixing errors | Technical data | Legitimate interests |
For the content of recordings, the workspace owner decides what is recorded and who sees it. We process that content on the owner's behalf, as described in the data processing addendum.
Chrome extension
The use of information received from the ReproClip extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data the extension collects is used only to create and show your bug reports. It is not transferred to third parties except the service providers listed below, not used for advertising or credit decisions, and not read by people except with your permission, for security, or where the law requires it.
Where your data is stored
Our application servers and database are in Germany, and recording files are stored in Cloudflare R2 in the European Union. Files are private: they are encrypted at rest and can be opened only through links that expire after 15 minutes. We operate ReproClip from Indonesia, and our email provider is in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, data that leaves it is transferred under the European Commission's Standard Contractual Clauses.
Who processes it for us
| Provider | Purpose | Location |
|---|---|---|
| Contabo GmbH | Application servers and database | Germany |
| Cloudflare, Inc. | File storage (R2), DNS and network protection | European Union (files); global network |
| Amazon Web Services, Inc. | Sending email (Amazon SES) | United States |
| Functional Software, Inc. (Sentry) | Error reports from our servers | European Union |
| Paddle.com Market Ltd | Payments, invoices and tax, as merchant of record | United Kingdom |
Google and GitHub process your sign-in under their own privacy policies.
How long we keep it
- Recordings in a workspace on a paid plan (videos, screenshots, logs, thumbnails): until someone deletes them, or the workspace or your account is deleted.
- Recordings in a Free workspace, or one whose paid plan ended: videos and screenshots 60 days after recording (or after the plan ended), logs and thumbnails 12 months. We email the person who made them 7 days before the video or screenshot is deleted.
- Recording metadata (title, page URL, browser details): until the recording, its workspace or your account is deleted.
- Deleted recordings: files are removed at once; the title, page URL and browser details 30 days later.
- Deleted workspaces: kept 30 days so the owner can restore them, then removed permanently.
- Unfinished uploads: 24 hours. Invitations: 7 days.
- Your account: until you delete it in Settings → Account. That deletes your workspaces and their recordings at once. Recordings you made in other people's workspaces belong to those workspaces and stay there without your name.
- Billing records: as long as tax law requires, held by Paddle.
Your rights
Depending on where you live, including under the GDPR and Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another service. You can change most of it yourself in the app, and delete your account at any time. For anything else, email [email protected]; we reply within 30 days. If a recording in someone else's workspace shows your data, ask that workspace's owner first, since they control it; we will help them. You can also complain to your local data protection authority.
Security
Sensitive values are redacted in your browser before upload. Connections use HTTPS, storage is private, the extension's token can only reach the endpoints the extension needs, and you can revoke it in Settings. If a breach affects your data, we will tell you without undue delay.
Children
ReproClip is a tool for work and is not meant for anyone under 16.
Changes
We will update the date above when this policy changes, and email account holders at least 14 days before a change that reduces your rights.