KONTROL privacy policy

In short: KONTROL keeps your scenarios, steps, run history and settings on your own computer. It has no analytics, no advertising and no tracking, and it does not sell data. Information leaves your computer only when you use one of the features listed in section 2, and only what that feature needs.

1. What stays on your computer

KONTROL stores the following in Chrome's extension storage on your device. It is not sent to us.

• Your scenarios, their steps and run settings, and any run data (CSV) you import.
• Run history: results, timings, step details, screenshots of failed steps and any run videos you record.
• Your settings, including alert rules, triggers and the phone-command passcode.
• Your licence key and its status, and a random device identifier that KONTROL creates for licence checks, sent with the name of your browser (for example Chrome) so you can tell your devices apart when you free a seat.
• Your Anthropic API key, if you choose to use the AI features, the ntfy topic name, and any webhook addresses you enter.

You can delete run history from inside KONTROL at any time. Removing the extension deletes everything it stored.

2. What can leave your computer, and when

Settings > What leaves this computer shows the same list inside KONTROL, whether each item is in use right now, and a local receipt of the last things sent (the time, which feature, which site and how much, never the content). The receipt stays on your computer and you can clear it.

Nothing is sent in the background for analytics or diagnostics. These are the only cases in which KONTROL contacts another service:

Feature	What is sent, and to whom
Licence check	Your licence key, the random device identifier and the name of your browser go to KONTROL's licence service when you redeem or release a key, and again when KONTROL re-checks it, which only happens if you have a licence key. Also once, when you press Start trial in the Upgrade window: that sends only the random device identifier.
Suggestion box	The text you write, and the email address if you choose to give one, go to KONTROL only when you press send. The email address is optional and is used only to reply.
News	Opening the news panel, and (unless you turn it off in Settings) opening the Workspace once a day to see whether there is something new, makes a read-only request to KONTROL's news service. Nothing about your scenarios, settings or use is included. As with any web request, the service sees your IP address.
Phone alerts and phone commands	If you turn these on, alert messages (for example a scenario's name and why it failed) are posted to the ntfy.sh topic you choose, and KONTROL reads the commands you send to that topic. Anyone who knows the topic name can read it, so make it long and random and set a passcode. ntfy.sh is a separate service with its own policy.
Webhooks	If you add a webhook to an alert rule, the alert message is sent to the address you entered, which could be Slack, Discord, Teams or your own server.
AI features (off by default)	When you turn them on and paste your own Anthropic key, KONTROL sends requests straight from your browser to Anthropic. Depending on the feature this can include a failed step's description, message and screenshot, summary statistics of recent runs, or, for drafting a scenario, your goal and the title, address and visible elements of the page you are drafting on. KONTROL's own servers never see these requests or your key. Anthropic's terms and privacy policy apply to what you send.
Send a request step	A scenario step you write can send an HTTP request to an address you choose, with the headers and body you give it. The request goes from your browser straight to that address, never through KONTROL's servers, and nothing is sent unless a scenario containing the step is run.
No broken links check	A scenario step you add can check the links on a page. It asks each link, from your browser to the site the link points to (a request with no cookies and nothing from the page), only when a scenario containing the step is run. Nothing goes through KONTROL's servers.
Buying KONTROL Pro	The upgrade button opens a checkout page run by a payment provider. KONTROL never sees your card details.

KONTROL's licence and suggestion services use your IP address only to limit how many requests one caller can make in a short time. They do not keep a record of it.

3. What KONTROL does not do

• It does not sell your data or share it with data brokers.
• It does not show advertising or use tracking tags, analytics or crash reporting.
• It does not collect your general browsing or copy the contents of web pages. It runs only in tabs that a scenario you built is acting on, and what it reads there stays on your computer unless a feature in section 2 is switched on and uses it.

4. Why KONTROL asks for access to all websites

A scenario can target any address you choose, so Chrome asks KONTROL for permission to run on all sites. It uses that permission only to carry out the steps you built, in the windows it opens for them.

5. Your choices

• Leave the features in section 2 switched off and nothing leaves your computer except a licence check, if you have a licence.
• Delete run history from inside KONTROL, or remove the extension to delete everything it stored.
• To ask about, or have removed, anything you sent through the suggestion box, use the suggestion box again and say so, giving the email address you used.

6. Changes to this policy

If what KONTROL collects or sends changes, this page is updated and the date above changes with it.

7. Contact

Questions about this policy can be sent through the lightbulb button (suggestion box) in the top bar of KONTROL.