Sign-in uses managed authentication with hashed credentials and short-lived sessions. You can reset your password from the sign-in screen at any time.

Recordings are private to your account. Team sharing is opt-in per take, and share links are only created when you generate one.

All traffic runs over HTTPS, and saved takes live in private storage buckets scoped to your account with server-side access rules.

If you believe you have found a vulnerability, contact us through the contact page with steps to reproduce. Please avoid accessing other users' data while testing, and give us reasonable time to respond before disclosing publicly.