Privacy Policy

Last updated: May 2026

CatchIt ("we", "our", "us") operates the catchit.cc website and Chrome extension. This policy explains how we collect, use, and protect your information.

1. Information We Collect

• Account info: Username, email address, hashed password (for registration and login)
• Google OAuth: If you sign in with Google, we receive your Google email and name. We do not access your Google contacts, files, or other data.
• Recordings: Video/audio files you create using the extension, stored on our servers
• Usage data: Recording count, file sizes, login timestamps, activity logs
• Support messages: Any feedback you send via the Support page

2. How We Use Your Information

• To provide the recording and sharing service
• To manage your account and enforce usage limits
• To send verification emails (OTP code) during registration
• To display your usage statistics in Settings
• To respond to support messages
• To detect and prevent abuse (rate limiting, suspicious activity)

3. Data Storage

Recordings are stored on Cloudflare R2 (encrypted at rest). Account data and metadata are stored on our AWS EC2 server. Passwords are hashed using bcrypt and never stored in plaintext. We do not sell, rent, or share your data with third parties.

4. Recording Privacy

We do not access or view your recordings unless required for technical support that you explicitly request. Your recordings are private to your account.

5. Sharing

When you share a recording link (e.g. catchit.cc/r/your-recording), anyone with that link can view it without logging in. You control which recordings are shared by choosing to copy and send the link. You can delete recordings at any time to revoke access.

6. Chrome Extension Permissions

The CatchIt Chrome extension requests the following permissions, each used only for its stated purpose:

• tabCapture: Captures video and audio from the browser tab you choose to record
• activeTab: Injects the floating recording control bar into the page you are recording
• storage: Saves your login token and preferences locally on your device
• tabs: Lists your open tabs so you can select which one to record
• scripting: Injects the recording control bar (pause/stop/mic) into the recorded page
• offscreen: Runs the recording engine in a background document (required for Manifest V3 recording)

The extension only activates when you click "Start Recording." It does not run in the background, does not track your browsing, and does not collect any data outside of active recording sessions.

7. Data Retention

• Active recordings: stored until you delete them
• Trashed recordings: automatically and permanently deleted after 7 days
• Account data: retained until you request deletion via Support
• Activity logs: retained for security monitoring

8. Your Rights

You can: view your account info (Settings > Account), delete your recordings, request account deletion by contacting support.

9. Security

We protect your data with: HTTPS encryption, secure authentication (JWT + bcrypt), rate limiting, input validation, Content Security Policy headers, and private cloud storage with expiring access URLs.

10. Contact

For privacy questions or data deletion requests: use the Support page in Settings (catchit.cc/settings/support).

← Back to CatchIt