Privacy Policy
Last updated October 11, 2026
MacroSession is a product of Sakamoto Labs LLC (“we”). This policy covers two groups: customers, who sign up and install MacroSession, and end users, the people using a customer's website or app where the script runs.
Customers
- Account data: email, name, a bcrypt hash of your password (or your Google identity if you sign in with Google).
- Project data: names, settings, allowed origins, and a hash of your secret key.
End users
For each visit to a customer's site with the script, we store on the customer's behalf:
- A recording of the session: the page's structure and changes to it, mouse movement, scrolling and clicks. Text typed into form fields is replaced with asterisks in the browser and never reaches us; customers can also mask all text or exclude parts of the page.
- Page addresses visited (with sensitive query parameters such as tokens or emails redacted), clicks, JavaScript error messages, and events the customer chooses to send.
- A random identifier kept in the browser's local storage, and the id and traits the customer passes to identify(), if any.
- Browser, operating system, device type, screen size, language and referring page. We do not store IP addresses.
We do not set cookies on customers' sites, and we do not sell or share this data. The customer is the controller of end-user data and we process it on their instructions; customers are responsible for telling their users and, where required, obtaining consent — the script offers an opt-out for that. End users should contact the site whose app they used; we help customers honour access and deletion requests.
Infrastructure and retention
Data is stored in Google Cloud (United States). Recordings, sessions and events are deleted automatically 30 days after the session. Deleting a project deletes all of its data immediately. Deleting your account on request removes your account data within 30 days.