Privacy & consent

A useful report starts with a message. Screenshot and replay capture are optional, and declining them keeps the message-only path available.

What a message includes#

A submitted message includes captured browser context such as page URL, title, user agent, viewport, language and console entries. Screenshot and replay attachments have their own consent choices. Opening the widget does not grant either permission.

Choose a consent presentation#

The project controls how the choices appear: a guided wizard, inline checkboxes or separate prompts. The wizard is the default. These are available on every plan in Widget customization.

Screenshot consent#

When screenshot capture is allowed, the widget can capture the page when the report is sent. When permission is denied or still pending, no screenshot is attached. The choice persists in localStorage under testosaurus:screenshot-consent.

A screenshot can contain visible page content. Replay input masking should not be interpreted as a promise that screenshots are automatically redacted.

Replay consent#

Replay recording starts only after consent is granted. That choice persists under testosaurus:replay-consent. Inputs are masked by default in replay; read Session replay for recording and buffer behavior.

Active testing sessions#

Active-mode tokens show a prominent consent overlay for the testing session. Accepting enables the optional captures; declining keeps feedback available without screenshots or replay. The session choice is stored under testosaurus:active-consent.

Revisit a choice#

Consent is stored in the browser on the application where the widget runs. Clearing the relevant Testosaurus consent key and reloading allows the choice to be presented again. Changing a project's presentation style does not itself grant consent.

Access and export#

Reports and media belong to the project. Authorized dashboard users and account management keys can retrieve them. Every plan includes JSON export of project data with a manifest of stored attachments. See Export and the Privacy Policy.