Privacy Policy

QAlimucho ("we", "us") provides a web application, a Wordpress plugin, and a Chrome browser extension ("QAlimucho Assistant") for recording and replaying user interactions on websites. This privacy policy explains what data we collect, how we use it, and your rights.

The QAlimucho Assistant browser extension records your interactions on web pages only when you explicitly click the Record button. It does not run in the background, does not collect browsing data, and does not modify your pages outside of a recording session.

The extension requests the following Chrome permissions:

• activeTab — interact with the currently active tab during recording
• tabs — read tab URL and title for recording metadata
• storage — persist your settings and authentication tokens locally
• Host permissions (all HTTP/HTTPS sites) — enable recording on any website you choose to test

While a recording session is active, the extension captures:

• User actions: clicks, typed text, form selections, scrolling, keyboard shortcuts
• Page context: current URL, page title, viewport dimensions, user agent
• Element selectors: test IDs, ARIA labels, CSS selectors for replaying actions
• Screenshots (optional, configurable): page screenshots taken after actions, stored as JPEG images

No data is collected when you are not recording. Recording must be explicitly started by clicking the Record button in the extension.

The extension stores the following data on your device using Chrome's storage API:

• Authentication tokens (access and refresh tokens) for your QAlimucho account
• Your remembered email address for convenience
• Settings: server URL and screenshot preference
• The current recording session (cleared when recording ends)

Recorded data is sent only to your configured QAlimucho server when you explicitly submit a recording. By default this is qalimucho.com, but you can configure a self-hosted server.

Transmitted data includes:

• All recorded actions and their metadata
• Screenshots (if enabled)
• Session metadata (viewport, user agent, timestamps)

We do not send data to any third-party services. Your recordings are only accessible through your QAlimucho account.

When recording login flows, the extension detects credential fields (username/password) by analyzing field attributes. Credential field types are identified locally on your device. Actual credential values are not transmitted to the recordings API. You manage your test credentials separately in your QAlimucho account settings.

When you use the QAlimucho web application, we collect standard account information (email address, name) and store your recordings, test configurations, and schedules. We use cookies for authentication and session management.

The QAlimucho wordpress plugin for WooCommerce does not collect any data. It is just here to enable a fake payment gateway when your test scenario is triggered so that it does not interfere with your actual payment processing.

We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies and does not collect personal data. It provides aggregate statistics only.

You can delete your recordings at any time from your QAlimucho account. If you delete your account, all associated data is permanently removed. Local extension data can be cleared by removing the extension or clearing Chrome's extension storage.

You have the right to:

• Access your data through your QAlimucho account
• Delete your recordings and account at any time
• Export your data
• Opt out of screenshots during recording via extension settings

For questions about this privacy policy, contact us at support@qalimucho.com .