Security

1. Security posture

Playback keeps your recordings on your device, which removes an entire class of risk: content we never receive is content we can't lose. For the parts of the Service that do run online — our website, licensing, and payments — we follow modern security practices to protect your account and information.

2. Application security

• Distributed as a notarized, code-signed macOS app so the system can verify its integrity.
• Runs within the macOS sandbox and requests only the permissions a given feature needs.
• Recordings are processed locally, minimizing exposure of sensitive content.
• On-device redaction lets you mask sensitive regions before anything is shared.

3. Infrastructure and data

• Traffic to our website and services is encrypted in transit with TLS.
• Payments are handled by a PCI-compliant processor; we never store full card details.
• Access to production systems is limited to those who need it and protected by strong authentication.

4. Reporting a vulnerability

We welcome reports from security researchers. If you believe you've found a vulnerability, email [email protected] with steps to reproduce. Please give us a reasonable window to investigate and fix the issue before public disclosure.

• Act in good faith and avoid privacy violations, data destruction, or service disruption.
• Only interact with accounts you own or have explicit permission to test.
• We won't pursue legal action for research that follows these guidelines.

5. Our commitment

We acknowledge valid reports promptly, keep you updated as we investigate, and credit researchers who want recognition once a fix ships. Security is ongoing work, and we treat it that way.