Privacy notice

Last updated 2026-10-28

What we store

• Your account — your email address and the sign-in links sent to it.
• Your projects — the sites and apps you describe, your tests, flows and the tester's notes.
• Your runs — transcripts of what the tester did, screenshots, and the page contents it read, kept in a private storage area that only your account can open.
• Your secrets — the model API key you bring, any project secrets, and test-account passwords. These are encrypted (AES-256-GCM) with a master key that lives only in the API service, never in the database. A key is decrypted once per run, handed to the tester on your Mac or in the cloud, and never written to disk there.
• Your Macs — the name you give a paired Mac, what it can run, and the devices it reports. The pairing token is stored only as a hash.

What reaches your model provider

During a run the tester sends your test text, your notes, and the text and structure of the screens it reads to the model provider you chose, using your own key. Screenshots are kept for you and are not sent to the model. What the provider does with those requests is governed by its terms, not ours.

Where it lives

Account data, projects and results are stored with Supabase (Postgres and object storage); the API runs on Cloudflare Workers; sign-in links are delivered through Resend. Runs themselves execute on your own Mac. Secrets stored inside a run's transcript are replaced with [redacted] before anything is uploaded. The public pages load nothing from anyone else: their fonts are served from this site.

How long

Everything is kept until you remove it: delete a project to remove its tests and results, remove your key under Providers & keys, forget a Mac under Computers. There is no automatic deletion yet; a retention limit for old run results may be introduced later and will be announced here first. To delete your whole account, write to the address below.

Who can see it

Only you, through your account. The operator can access stored data for running and fixing the service and does not share it with anyone else. We don't sell or pass on your data, and we don't use your tests or results to train anything.

Contact

Christian Arby
Rödhakevägen 6b
132 45 Saltsjö-Boo
Sweden