Macro Replay — Privacy Policy
Effective: 2026-10-12 · Version 1 (Phase 1, free core) · Operator: SSTE SERVICOS, SISTEMAS E TREINAMENTO EMPRESARIAL LTDA ("SSTE", "we"), a company registered in Brazil.
Macro Replay is a Chrome extension that records a sequence of actions on a web page and replays it. It has no account, no cloud storage and no sync. This page says exactly what data exists, where it lives and who can read it.
1. What data exists and where
| Data | Where it is stored | Who can read it | How long |
|---|---|---|---|
| Recorded macros: the clicks, typed values, selections, element text/selectors and page URLs of the steps you recorded. Typed values may include personal data you entered into non-sensitive fields. URLs may include query strings. | Only in your browser (chrome.storage.local) on this device | You, and the extension on this device | Until you delete the macro. Export is user-initiated; the export dialog warns when a macro contains full URLs. |
Passwords (type=password), card numbers (autocomplete="cc-*") and one-time codes | Nowhere. The value is never read; the macro only remembers that a secret field was filled, and the replay pauses so you can type it yourself. | — | — |
| Fields whose name, label or placeholder merely *looks* sensitive (for example a password shown as plain text, "senha", "CVV", "card", "token", "secret", "OTP", "SSN", "CPF") | Never written to the macro unless you tick "Record this value" for that field. Until you answer, the typed value is held only in the extension's in-memory session storage (chrome.storage.session) so that the question can be asked; it is discarded on "No", when you delete the macro, after 10 minutes without an answer, or when Chrome closes. It never touches disk. | You (only if you tick "Record this value") | ≤ 10 minutes, or until you answer |
| Run diagnostics: per-step status, selector kind, error text, duration and the page origin + path (query strings and fragments are excluded unless you tick "include full URLs") | Only in your browser (chrome.storage.local) | You | The last run |
Anonymous usage counters: the event names install, first_record, first_replay, success, cta_interest, each sent at most once per installation | Our metrics service (a Cloudflare Worker) as daily totals per event. No identifier, no cookie, no page content, no macro data. For rate limiting, a keyed hash of the request's IP address is kept for up to one hour and then expires; the IP address itself is not stored. | SSTE (totals only) | 400 days (totals); the rate-limit hash ≤ 1 hour |
The install ping (install) is sent once when the extension is installed, before any settings are shown, and contains only the event name. Turning off "Send anonymous usage counters" in Settings stops all further pings. Nothing else is ever sent by the free version.
The extension never contacts any other server. It does not read your browsing history, does not run on pages you did not invoke it on, and does not inject anything into pages while it is not recording or replaying.
2. What we do not do (Limited Use affirmation)
We use the data described above only to provide the recording and replay you requested. We do not sell it, do not transfer it to third parties outside the approved use cases, do not use it for advertising, do not use it to determine creditworthiness or for lending, and no human reads it. We comply with the Chrome Web Store User Data Policy, including its Limited Use requirements.
3. Phase 2 (paid Pro unlock) — applies only once Pro is available
When a one-time Pro unlock is sold, activation sends the e-mail address used at checkout and the order number to our licence service over TLS. The service stores the e-mail only as a keyed hash (HMAC) together with the order numbers, a random licence identifier and up to three random device identifiers; the extension stores a signed licence token and a random device id on your device and never stores your e-mail. Payments are processed by Kiwify (card data never reaches us). This section is informational until Pro exists; the listing will say so.
4. Your rights (LGPD and GDPR)
Because SSTE is a Brazilian company, the Lei Geral de Proteção de Dados (LGPD) applies; EU residents also have the rights of the GDPR. Since the free version stores your data only on your own device, you exercise access, correction and deletion directly: open the extension, delete macros, or uninstall it (uninstalling removes all local data). For questions about this policy or the anonymous counters, contact our data protection officer (encarregado):
Encarregado / DPO: sste.tools@proton.me (SSTE SERVICOS, SISTEMAS E TREINAMENTO EMPRESARIAL LTDA, Brazil)
5. Children
Macro Replay is a productivity tool for adults at work; it is not directed to children under 13 and we do not knowingly collect data from them (the free version collects no personal data at all).
6. Changes
We will post changes on this page with a new effective date and version number. The URL of this page will not change.
7. Contact
Support: sste.tools@proton.me · Data protection: sste.tools@proton.me · Operator: SSTE SERVICOS, SISTEMAS E TREINAMENTO EMPRESARIAL LTDA, Brazil.