Privacy Policy

Effective date: 2026-10-13 · Seller: Yuyang Xiao, independent developer, China · Contact: arisxiao0209@mail.grokbot.com

Summary

ReproDrop runs entirely on your device. It has no accounts, no servers that receive your data, no analytics and no tracking. The extension itself makes no network requests.

What ReproDrop processes, and where

• Screenshots of the tab you choose to capture.
• Console errors and warnings, failed network requests (URL, method, status, timing, an allowlist of diagnostic headers and a truncated request/response body) of the current tab — only after you open the toolbar, or from page load on sites where you explicitly enabled Always-on monitoring.
• Reproduction steps: which elements were clicked and which fields were typed into. Typed values are never recorded.
• Element snapshots you choose with Pick element (CSS selector and a truncated HTML snippet with form values removed).
• Environment info: browser and OS version, viewport, language, time zone, page URL.
• Custom branding (Agency): the name, colour, optional contact email and logo image you enter. Stored only in the extension's local storage and written only into reports you export, and into a client brand pack if you export one.
• Client brand packs: if you import a pack from your agency, its branding is stored locally and verified offline. Nothing is sent to us or to the agency.

Before anything is stored or exported, ReproDrop redacts common secrets: Authorization and Cookie headers, tokens/passwords/keys in URLs and JSON/form bodies, Bearer tokens and JWTs.

Reports are kept in the extension's local storage (IndexedDB) on your device as “History”. You can delete any or all reports at any time; uninstalling the extension deletes everything.

What leaves your device

Only files you explicitly export (HTML, Markdown, AI context pack, PNG) are saved by your browser to your Downloads folder, and text you choose to copy. What you do with those files — for example a client sending a report to their agency — is up to you.

License keys

Personal and Agency license keys are verified offline with a cryptographic signature. The key contains a random license ID, the tier, the device limit and a truncated hash of the purchase email — not the email itself. Payments are processed by our merchant of record, Creem (to be confirmed before launch); Creem's privacy policy applies to checkout and the payment data you give them. We receive only your email, order ID, product and purchase status.

Permissions

activeTab, scripting: inject the toolbar into the tab you click on. storage, unlimitedStorage: settings, license, branding and local report history. Optional host access: only if you turn on Always-on monitoring, and only for the sites you list.

Data sale and sharing

We do not sell, transfer or share user data with third parties, do not use it for advertising or creditworthiness, and do not use it for any purpose unrelated to the extension's single purpose: creating bug reports.

Children

ReproDrop is a business tool not directed at children under 13.

Changes

We will update this page and the effective date if this policy changes.