Privacy & data protection

Annote captures nothing until you start a session.

The extension loads on the pages you visit, but it sits inactive — in transparent passthrough — until you open the tray and begin a session. It is not recording your browsing in the background, and there is no always-on capture.

When you end a session (or close the tray), capture stops and the buffer is cleared.

This is the part most tools don't do: Annote redacts sensitive data on your own machine, before any of it leaves your browser.

As your console, network, and action data are captured, Annote automatically replaces sensitive patterns — JSON Web Tokens, email addresses, card-like numbers, phone numbers, API keys (such as Stripe, GitHub, and Slack keys), Authorization headers, and Cookie headers — with safe placeholders like <jwt>, <email>, <card>, or <redacted>.

Network request headers go further: authorization, cookie, and common API-token and secret headers are stripped out entirely. Sensitive form-field values — passwords, hidden fields, credit-card fields — are never captured at all.

If there are parts of your own pages you want to keep out of capture, you can mark them in your HTML.

Annote honors the standard session-replay markers, so if you already use a tool like FullStory you may have these in place already.

• [data-private], .fs-exclude, .fs-block, [data-annote-mask] — fully withholdthe element. Annote records that an interaction happened, but keeps the element's text and attributes out.
• .fs-mask, [data-rr-is-password] — keep the element's structure but drop its text and labels.
• .fs-unmask, [data-annote-blur='false'] — override a surrounding masked region for one specific element (the closest marker wins).

These markers apply to user-action capture and to console capture (when you log a DOM element).

<!-- fully withheld from capture -->
<div data-private>
  <span>Card ending 4242</span>
</div>

<!-- masked region, one field unmasked -->
<form class="fs-mask">
  <input name="coupon" class="fs-unmask">
</form>

Two things these markers do not do, stated plainly so there are no surprises.

A clear line between the two — after the in-browser redaction above has already run.