Privacy and security
What leaves your computer, and when.
KONTROL runs in your browser and does not run in the background of ordinary browsing. The only things that leave your computer are the ones below. The same list is shown inside KONTROL, in Settings, under "What leaves this computer".
Your data stays where you made it
Scenarios, results and settings stay in your browser. Each feature that can send something elsewhere is off until you turn it on, and each has its own switch.
The table below is the whole list.
What can leave your computer
| Channel | Sent to | What is sent | When |
|---|---|---|---|
| Licence check | kontrol-license.plingwood.workers.dev | Your licence key, a random device identifier and your browser's name, such as Chrome. Not your name, email or browsing. | When you redeem or release a key, and when KONTROL re-checks it, which only happens if you have a key. Also once if you press Start trial, which sends only the random device identifier. |
| Suggestion box | kontrol-suggestions.plingwood.workers.dev | The text you write, and your email address if you choose to give one. | Only when you press send. |
| News | kontrol-news.plingwood.workers.dev | Nothing about you or your scenarios. A read-only request; as with any web request, the service sees your IP address. | When you open the news panel, and once a day when you open the Workspace, to show a dot when there is something new. You can turn that off. |
| Phone alerts and commands | ntfy.sh | Alert messages (a scenario's name and why it failed) posted to the topic you chose. Commands you send to that topic are read back. | When an alert is sent, and about every minute while phone commands are on. |
| Webhooks | The addresses you entered | The alert message, to the address you gave an alert rule (Slack, Discord, Teams or your own server). | When a rule with a webhook fires. |
| AI features | api.anthropic.com | Straight from your browser to Anthropic with your own key. Depending on the feature: a failed step's description, message and screenshot, summary figures of recent runs, or the goal, title, address and visible elements of the page you are drafting on. | Only when you use an AI feature. Off by default. |
| Send a request step | The addresses in your steps | The request you wrote, with the headers and body you gave it, straight from your browser to that address. | Only when a scenario containing the step runs. |
| No broken links check | The links on the page | A request for each link on the page you check (HEAD, then GET if refused), with no cookies and nothing from the page. | Only when a scenario containing the check runs. |
This website
This website does not use analytics, trackers or cookies.
The one place it sends anything is the licence page: when you press Look up or Release seat, your licence key (and, for a release, the reference of the seat) goes to kontrol-license.plingwood.workers.dev, the same service the extension uses. The page keeps the key in memory only and forgets it when you close or reload it.
The full privacy policy is on its own page.
Reporting a security problem
Email kontrolapplication@gmail.com with "Security" in the subject, and please keep details private until it is fixed.
Scope and what to expect are on the security page.