Privacy Policy
Last updated 17 August 2026
Inline Play is a browser test-automation extension. You record the steps of a form or flow once, and the extension replays them for you. This policy explains exactly what it stores, where that data goes, and what it never touches.
What is collected
| Data | Why | Where it is stored |
|---|---|---|
| Your name, email address and password | To create the account that owns your recordings, and to sign you in | On our server. Passwords are never stored in readable form — they are hashed with scrypt and a per-account random salt. |
| Your recordings: element selectors, step order, the values you chose to save, and the addresses of pages you recorded on | This is the product — it is what gets replayed | On our server, scoped to your organisation and project |
| The list of sites you enabled | So the extension knows where it is allowed to run | On our server, and in your browser's local extension storage |
| A session token | To keep you signed in | Your browser's local extension storage. Deleted when you sign out. |
What is never collected
- Browsing history. Nothing is recorded about pages you visit. Only pages you deliberately record on are stored, and only the parts you record.
- Network traffic. The extension does not read, intercept or log the requests a website makes.
- Screenshots or page images. The extension cannot photograph your screen or your tabs.
- Passwords typed into websites. When you record a password field, a step is added for it, but the characters you type are never read or stored — a placeholder is saved for you to replace at run time, or swap for a variable. Your real password never leaves your browser. File and hidden inputs are ignored entirely.
- Analytics, advertising or tracking identifiers. There are none, and no third-party analytics service is used.
Sharing
Your data is not sold, rented, or shared with third parties. It is not used for advertising, and it is never used to train machine-learning models. The only people who can see a recording are the members of the organisation it belongs to — invited by you, with a role you choose.
Where the data lives
Data is held on a private server at auton8.dev and transmitted only over HTTPS. The database is not reachable from the public internet; it accepts connections from the application on the same machine only.
Retention and deletion
- Delete an individual recording at any time from the extension's editor.
- Delete a project or organisation from the extension popup, which removes the recordings inside it.
- Delete your account and all of its data yourself, at any time — open the extension popup and use Danger zone → Delete account & data. It removes your sign-in, the organisations you own, their projects, and every recording inside them, immediately and permanently. No backup is kept.
- Signing out immediately removes the session token from your browser.
Permissions, and why each one exists
| Permission | Reason |
|---|---|
storage | Keeps your session token and interface preferences in the browser |
scripting | Runs the replay engine on the sites you enabled, and only those |
activeTab | Lets the popup see which site you are currently on, so it can offer to enable it |
Host access to auton8.dev | To reach the service that stores your recordings |
| Optional host access to other sites | Requested one site at a time, only when you enable that site. Revoke it at any time and the extension stops running there. |
Children
Inline Play is a developer tool and is not directed at children under 13.
Changes
If this policy changes materially, the date at the top will change and the revised policy will be published at this address.
Contact
Questions, or a request to delete your data: uddinislam46@gmail.com