Nothing leaves your browser.

What is read

To name the control you acted on, SnipSteps reads the page around it: the text of the control, its accessible role, and the attributes used to find it again. It keeps only the name it chose. A screenshot is a picture of the tab, taken only while you capture or when you ask for one.

• The control's label, a nearby caption or a table header — never the contents of a text box.
• The page title (trimmed) and the site's origin, with each step.
• The frame the step happened in, and timestamps.

What never is

SnipSteps does not send any of these anywhere on its own and does not write them to a log.

• Typed values
• Passwords
• Cookies
• Request bodies
• Browsing history
• Page content beyond the labels of controls you acted on
• URLs beyond the site origin

Redaction

A screenshot can show whatever was on screen, including something you typed. SnipSteps does not redact anything for you automatically: you place a black box over anything sensitive during or after capture, and it pauses on sign-in and payment pages it can see.

• The black box replaces the pixels in the stored picture; nothing of the original remains.
• Blur and pixelate (Browser package) obscure what was there; large text can still be guessed, so use the black box for anything that must not be seen.
• Undo lasts until you close or reload the review page; its copy is held in memory and never stored.

Offline operation

SnipSteps works without a network connection and without an account. Capture, review and every export run in your browser; nothing is sent anywhere on its own. A request leaves the browser only when you export or share a file yourself, when you click Renew or Upgrade (which sends only your licence key's id), or when you switch on the optional usage counts.

Where files live

Your guides, steps and screenshots are stored in this browser profile and nowhere else, protected by your operating system account like any other file the browser writes. Exports you make — an HTML guide or a session package — go where you save them.

Data flow

The whole path is in one browser: the page you capture, SnipSteps, and your browser profile. No arrow leaves the device.

Browsers

SnipSteps runs in Chrome and Edge, installed from their stores. Only the latest published version is supported with security fixes; the browser updates it. SnipSteps does not run in private (incognito) windows.

Reporting a vulnerability

If you find a security problem in the extension or this site, write to the address below with what you found, how to reproduce it, the browser and extension version, and whether you have shared it anywhere else. Please do not open a public issue for a suspected vulnerability. We confirm receipt and keep you informed; the same address is in this site's security.txt.

Security contact: nishiith.trivedi@gmail.com