Casefile Privacy Policy
Developer: VNCNT Labs · Effective date: October 17, 2026 · Version covered: 1.0 (free) · Contact: hello@vncntlabs.com
This policy covers the browser extension VNCNT Casefile: Bug Reports with Replay, Console & Network Logs for Google Chrome and Microsoft Edge. Casefile captures what happened on a web page when you hit a bug and bundles it into a report you can share. Reports stay on your computer. VNCNT Labs never receives your reports, recordings or anything else you do with the extension, and version 1.0 makes no network requests at all.
1. When it runs and what it can access
Casefile captures only after you start it (toolbar icon → Capture a bug or Instant report, or Alt+Shift+B), only in that one tab, and only until you press Finish or Discard, close the tab, or reach the replay length limit (2 minutes on the free plan). The toolbar badge shows a timer or error count while it captures.
It has no access to websites by default. When you start, your browser gives it temporary access to that tab ("activeTab"). If the tab moves to a different website during a capture, Casefile pauses the logs for that page (the video keeps recording) until you click the Casefile icon there; the report notes the gap. If you turn on the optional Catch errors from page load setting, your browser asks you for access to all sites so Casefile can add a small listener to each page as it opens. That listener keeps at most the last 500 console messages and request summaries in the page's own memory; they are discarded when you leave the page and are read only if you capture a report on that tab. You can turn the setting off at any time.
2. What a report contains
- Video replay of the tab (video mode) recorded with the browser's tab capture, or a screenshot of the visible tab when you finish.
- Console messages from the page (errors and warnings, plus log/info if enabled), uncaught errors and unhandled promise rejections.
- Network requests made by the page: method, address, status code, timing and size. Request and response bodies are not read. If you turn on Include response bodies of failed requests, the first 2 KB of responses with an error status are kept, after redaction. Request bodies are never kept.
- Your steps: what you clicked, selected or typed into, described from the element's visible label (for example "Click 'Pay now'"). Typed text appears only if that setting is on; passwords and text that looks like a secret are never written.
- Environment: browser and version, operating system, screen and window size, language, time zone, colour scheme, connection type, CPU cores and approximate memory as reported by the browser, the page address and title.
- Your own notes (summary, expected and actual result) and any blur or highlight boxes you draw.
It does not read cookies, browsing history, other tabs, or storage of the websites you visit.
3. Redaction and the Privacy Shield
Before anything is stored, Casefile removes email addresses, API keys and tokens, JWTs, card numbers (Luhn-checked), passwords and sensitive values in addresses (for example ?token=… or session_token=…) from console text, network addresses, response bodies and step titles. While capturing, the Privacy Shield blurs those same kinds of text on the page itself, so they don't appear in the video or the screenshot. Redaction reads text, not pictures: text inside images, canvas-drawn apps or embedded frames from other websites cannot be detected. Please review a report before you share it; you can draw blur boxes on the screenshot.
4. Stored on your device only
- Reports in the extension's own browser storage (IndexedDB) and video files in its private file system on this computer, until you delete them.
- Settings, and (Pro, later) tracker tokens and branding, in the extension's local storage. Not synced.
- Session state (which tab is being captured) in temporary session storage, cleared when the browser closes.
Uninstalling the extension removes all of it.
5. Exports and sharing
Exports (HTML report, zip, Markdown issue) are created on your computer and saved through your browser's normal download; "Copy issue Markdown" puts text on your clipboard. Where those files go afterwards is up to you.
6. Pro (not yet available)
Version 1.0 is free only and makes no network requests. When Pro launches it will be sold through Lemon Squeezy; activating it will send your license key and an instance name to Lemon Squeezy. Pro's one-click issue creation will send the issue text (already redacted) and, for Jira, the report zip, to the GitHub, Jira or Linear account you configure, using your own token, only when you click Create issue. We will update this policy before that version is released.
7. Data sharing and selling
We do not collect, sell or transfer user data. We do not use any data for advertising, creditworthiness or lending, or for anything unrelated to creating your bug reports.
8. Chrome Web Store Limited Use
The use of information received from browser extension APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements.
9. Children
The extension is not directed to children under 13, and we do not knowingly collect information from children.
10. Security
The extension uses the "activeTab", "scripting", "tabCapture", "offscreen", "storage" and "unlimitedStorage" permissions, plus optional access to all sites only if you turn that setting on. It runs no remote code: all scripts, fonts and its video library are packaged. Its pages use a strict content security policy that allows no connections to other servers in version 1.0.
11. Trademarks
Casefile is an independent product of VNCNT Labs. Google and Chrome are trademarks of Google LLC. Microsoft and Edge are trademarks of Microsoft Corporation. GitHub is a trademark of GitHub, Inc. Jira is a trademark of Atlassian. Linear is a trademark of Linear Orbit, Inc. They are mentioned only to describe compatibility.
12. Changes
If we change what the extension handles, we will update this page and the effective date before releasing that version.
13. Contact
VNCNT Labs · hello@vncntlabs.com · vncntlabs.com