Replaymap Privacy Policy

**Effective date:** October 24, 2026

**Applies to:** Replaymap version 0.5.0 and later, until replaced

**Extension:** Replaymap, a Chrome browser extension (beta)

**Operator:** Clif Lacata

**Contact:** replaymapapp@gmail.com

1. Summary

The Replaymap extension has no server, no account system, no analytics and no telemetry. The operator does not receive your recordings, screenshots or settings from the extension.

The extension makes no network requests with your recordings. Nothing you record is sent anywhere. The only requests the extension itself makes are to its own files and to in-memory data, never to a website or server. See section 5.

Everything you record is stored in your own browser profile, on your own computer.

Once you press Start recording, Replaymap records your clicks and typing in the tab where you started, until you stop. It does not record other tabs or windows, or any tab or pop-up that a page opens. See section 2.

Recording is not available in incognito windows.

Replaymap shows a notice before your first recording, and recording cannot start until you agree to it. See section 2.

This version has no AI writing feature. Step instructions are written by a built-in writer that runs on your computer. If an AI feature is added in a future version, this policy will be updated before it ships, and you will be asked for consent first. See section 5.

You are responsible for what you record. Recordings can include other people's information, health or financial information, your employer's information or students' records. See section 3A.

You can delete a single guide, delete all of your data, or export all of your guides, from inside the extension, at no cost. You can also remove everything by uninstalling the extension.

Replaymap asks Chrome for access to all websites so that recording keeps working when the tab you are recording moves to another site. Chrome shows a warning about this permission when you install. Replaymap records only in the tab where you start, and only while a recording is running. See section 9.

2. What Replaymap is and what it does

Replaymap records the clicks, typing and page changes you make in your browser after you press Start recording, captures screenshots of the tab you are recording, and turns them into a step-by-step guide that you can edit and export. While a recording is running, Replaymap records clicks and typing only in the tab where you pressed Start recording, including pages that tab moves to, even if it moves to another website. It does not record your other tabs or windows. If a page opens a pop-up or a new tab, that tab or window is not recorded. The click that opened it is saved as a step in the starting tab. It has no screenshot if the new tab becomes the active tab in that window before the screenshot is taken; if the page opens a background tab or a separate pop-up window, the starting tab is still the one on screen and the step gets a screenshot of it, never of the other page. If you switch to another tab while recording, nothing you do there is recorded. Recording runs only on web pages that start with http:// or https://, and only after you press Start recording. Press Stop recording in the Replaymap popup to end it. While recording, the toolbar icon changes and a step counter badge is shown. Recording also stops if the tab you are recording is closed.

Recording is not available in incognito windows: Replaymap cannot be enabled there.

Replaymap shows a notice before your first recording. Its text is:

> **Before you record.** Replaymap turns what you do in the browser into a step-by-step guide. Recording starts only after you agree here.

> **Only this tab is recorded.** Recording covers only the tab you start it in, including pages you move to inside that tab. Your other tabs and windows, and any tab or pop-up that a page opens, are not recorded. Replaymap asks for access to all sites so it can keep recording if that tab moves to another website.

> **What it captures.** Clicks, the text you type (password and card fields are masked, but masking can miss a field), page addresses and titles, and a screenshot of whatever is on screen after each click.

> **Where it goes.** Replaymap does not receive your recordings; they stay in this browser. Nothing is sent anywhere.

> **Do not record sensitive pages.** Skip banking, health, private messages and anything confidential or not yours to record.

> **Your responsibility.** You are responsible for what you record and for having the right to record it.

> **Stop and delete.** Press Stop recording at any time. To remove everything, use Delete all data in Your data.

> Buttons: "I understand, start recording" and "Not now". Footer: "You will see this again if these terms change."

Recording and GIF capture cannot start until you press "I understand, start recording". There is no keyboard shortcut that starts a recording. Replaymap stores your agreement (the notice version and the time) on your computer, shows the notice once, shows it again if the notice changes in substance, and removes your agreement when you use Delete all data, so the notice appears again. Pressing "I understand, start recording" also starts a recording straight away, in the tab you are in. The same notice is shown before your first GIF clip. GIF capture saves up to 12 seconds of the tab you are in at about 2 frames per second (see section 3), and what the notice says about screenshots and sensitive pages applies to GIF clips as well.

3. Data Replaymap handles

When you record, Replaymap saves the following in your browser. All of it stays on your device unless you export it.

**For every step:** the step type (navigate, click, type, select, check or GIF), the full address (URL) of the page, including any query string and fragment, the page title, and a timestamp. When the page changes, the step's label is the page title cut to 60 characters. The full address and the full page title are stored in the step's own fields. Query strings can contain names, search terms, identifiers or tokens.

**For a click:** a label for the clicked element (its accessibility label, or up to 60 characters of its visible text, or its placeholder, title or image text, or its tag name), and a screenshot of the visible part of the tab, taken shortly after the click. If a screenshot cannot be taken (for example, you switched to another tab first, or a page opened a new tab), the step is saved without one. Labels come from the page, so they can contain any visible text, such as a person's name, an email address or a ticket subject.

**For typing, selecting and checking:** the field label and up to 120 characters of what you typed or selected, and whether a box was checked.

**Masked fields:** the value is not recorded for password fields and for input fields that look like card or secret fields (for example, a card autocomplete setting, or a field name or id containing pass, password, card, cvv, cvc, ssn or secret). Only the fact that a value was entered is kept. This is a best-effort rule applied to input elements, so it can miss fields with other names (for example token, one-time code or PIN). Names, email addresses, phone numbers, addresses and message text that you type into other fields, and text typed into multi-line text boxes, are recorded.

**Screenshots:** a screenshot shows the whole visible tab, so it can include anything on screen, including personal information. Masking does not blur anything inside a screenshot. The editor has a manual redaction tool that you must apply yourself. Redaction in the editor covers the image pixels and discards the unredacted source of that image.

**GIF clips:** if you use the GIF capture, up to 12 seconds of the tab at about 2 frames per second is saved as a step in your guide.

**Settings:** screenshot quality, export branding (brand name, logo, colors, font, footer text), color mode and export preferences.

Replaymap does not create cookies, user identifiers or fingerprints, and it does not collect analytics, usage data or crash reports.

3A. Your responsibility for what you record

Replaymap records what is on your screen. That can include other people's personal information, health or financial information, your employer's confidential information, and students' records. Only record what you are allowed to record and keep. Review and redact guides before you share or export them. The redaction tool in the editor must be applied by you; it does not run automatically. Replaymap is not designed for regulated records, such as patient or student records. Do not record them.

The operator does not receive or process the information you record. You decide what to record, and you are responsible for that choice.

4. Where the data is stored

Guides, screenshots, GIFs, settings and branding are saved in your browser's extension storage (`chrome.storage.local`) in your browser profile. The extension asks for unlimited storage so that large screenshots do not hit the default quota. Recording state (whether you are recording, the current guide and which tab is being recorded) is kept in session storage that is cleared when the browser closes. In-progress GIF frames are held in memory only. Replaymap does not use Chrome's sync storage, so Replaymap does not sync your settings or guides. Replaymap does not add its own encryption to this storage; see section 11.

5. No AI features and no network requests with your recordings

This version of Replaymap has no AI writing feature, no AI provider settings and no API key. Step instructions are written by a built-in rule-based writer that runs on your computer and makes no network request. If an earlier version saved AI settings or a key in your browser, this version removes them when it starts.

The extension makes no network requests with your recordings, and Replaymap has no server to send them to. The only requests the extension itself makes are to its own packaged files and to data held in memory (data: and blob: addresses). It does not make requests to any website or server. Pages you record load as they normally do, and Replaymap adds no requests to them.

Chrome itself contacts Google services, for example for updates and account features, with or without Replaymap installed. Those connections are made by the browser, not by Replaymap, and are governed by Google's own terms and policies.

If an AI feature is added in a future version, this policy will be updated before that version ships. The extension will tell you in its own screens what would be sent and to whom, and will ask for your consent before anything is sent.

6. Exports

When you export a guide (PDF, Word, HTML, Markdown or a Zendesk article bundle), or use Export all to save every guide at once as a single ZIP file, Replaymap builds the file on your computer and saves it through your browser's download dialog. After that, the file is yours to store and share. Exported files are not encrypted by Replaymap and can contain the screenshots and text you recorded, so review them before sharing. In the Zendesk export, any image addresses you type are written into the exported HTML only; Replaymap does not fetch them.

7. Sharing, sale and use of data

The operator does not receive your recordings from the extension, so does not sell or rent them. Replaymap does not send your recordings to any third party.

The operator does not use or transfer user data for advertising, for credit or lending decisions, or to build profiles.

The operator does not receive or have access to your recordings and so does not read them. If you send material to the operator for support, it is read only with your explicit consent, or if the law or security requires it.

Chrome and the Chrome Web Store (Google) provide installation and updates, and their own terms and policies apply. Chrome makes its own connections to Google services with or without Replaymap (section 5). The operator sees only aggregated store statistics, such as installs and ratings, not your recordings.

8. Chrome Web Store User Data Policy and Limited Use

Replaymap's use of the information it handles (the web page content, page addresses, page titles, typed text and screenshots you record) adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. In particular:

Replaymap uses this information only to provide its single purpose: creating step-by-step guides from the actions you record, and exporting them.

The operator does not receive this information and does not have access to it. It stays in your browser on your computer.

Replaymap does not transfer this information to anyone. It is not sent to the operator or to any other third party. Files you export, and text you copy from the Zendesk export dialog, are saved or copied by you to places you choose (see section 6).

Replaymap does not use this information for personalized, retargeted or interest-based advertising, does not sell it, and does not use it to decide credit or lending.

The operator does not have access to your recordings and does not read them. If you choose to send a recording to the operator for support, the operator will read it only with your explicit consent, or if the law or security requires it.

If a feature that sends this information to anyone is added in a future version, this policy will be updated before it ships and you will be asked for consent first.

9. Browser permissions

Replaymap asks for these permissions, and uses them only for the purposes below.

| Permission | Why |

|---|---|

| Access to all sites (`<all_urls>` host access, plus a content script on http and https pages) | To record your clicks and typing in the tab where you started, to capture screenshots of that tab, and to keep recording when that tab moves to another website (for example a sign-in redirect to another address and back). The content script is loaded in http and https pages. On each page it only asks the extension whether that tab is the one being recorded, and it stays inactive unless you have agreed to the notice, pressed Start recording and the page is in the tab where you started. Replaymap's own testing found that Chrome's temporary one-tab access (the `activeTab` permission) alone did not reliably keep recording when a workflow moved to another site and back. Chrome warns about this when you install Replaymap, in words such as "Read and change all your data on all websites" and "Manage your downloads". Replaymap does not record anything outside a recording, and records only on http and https pages. |

| storage, unlimitedStorage | To save guides, screenshots and settings on your device. |

| scripting | To start the recorder in the tab where you begin recording. |

| downloads | To save exported files, including Export all, through the download dialog. |

Replaymap does not request the `tabs` or `activeTab` permissions, and has no optional permissions. Replaymap cannot be enabled in incognito windows.

10. Retention and deletion

Your data is kept in your browser until you remove it. You have these controls, all free, in the extension's Settings under "Your data" (and in the editor's More menu):

**Delete guide:** removes one guide, with its steps, screenshots and GIFs, from your browser. It is available in the guide list and in the editor.

**Delete all data:** you type DELETE to confirm. It removes every guide, all screenshots, your settings, your export branding and your recording agreement (so the notice shows again), and stops any recording in progress. It cannot be undone.

**Export all:** saves one ZIP file to your computer with one folder per guide (each holding the guide as a Markdown file plus its images) and an index, so you can keep a copy before deleting.

You can also delete individual steps in the editor.

The operator holds no copy of your data, so the operator cannot delete or export it for you. Files you already exported stay where you saved them. Removing the extension from your browser's extensions page removes its stored data from your browser, according to your browser's normal behavior.

11. Security

Data stays on your device. Replaymap relies on your operating system account and browser profile to control who can read it, and adds no protection of its own. Replaymap does not encrypt stored guides, screenshots or exports. Anyone with access to your browser profile or to your exported files may be able to read them. Because the extension makes no network requests with your recordings, there is no transmission of your recordings to protect.

12. Children

Replaymap is a productivity tool for adults at work. It is not directed to children under 13, and the operator does not knowingly collect personal information from children. The extension sends nothing to the operator. If you believe a child has sent personal information to the operator (for example in a support email), write to replaymapapp@gmail.com and it will be deleted.

13. Changes to this policy

If Replaymap changes how it handles information (for example, if an AI writing feature, accounts, payments, sync or analytics are added), this policy will be updated before the change ships. The effective date above will change. If the change affects what the extension collects or sends, the extension will also tell you in its own screens, and ask for your consent where the change sends your information anywhere, before the new practice starts.

14. Contact

Questions about this policy: Clif Lacata, replaymapapp@gmail.com. If you email the operator, include only what you are comfortable sharing. Do not send recordings, screenshots or exports unless the operator asks and you agree. The operator reads what you send, and your email is also stored by the email provider (Gmail).