Rheonox ACR — extension privacy policy
This policy explains how the Rheonox ACR browser extension for Chrome handles data. It complements the Rheonox Technologies privacy policy and applies specifically to the extension. It is written to meet the GDPR (EU 2016/679), the Swiss FADP, and the Chrome Web Store User Data Policy.
Who we are (data controller)
Rheonox Technologies — Elvis Soh (sole proprietorship), Switzerland — contact@rheonox.com.
What the extension does (single purpose)
Rheonox ACR is a test recorder. On a web application you choose to test and are authorized to use, it records your interactions (clicks, typed inputs, navigation) and turns them into an automated test case in your Rheonox QA+ account. It has this single purpose; it does not do anything else.
What data it processes
- Recorded interactions: the elements you click, the values you type, page structure and selectors, and — when you enable it — screenshots or video of the application under test, needed to build and replay the test.
- Test metadata: the test name you enter and technical run identifiers.
- Your QA+ session token: obtained when you sign in from the extension, kept only to authenticate calls to the QA+ API.
- Extension settings: your language and interface preferences.
Login credentials — how they are handled
The extension is designed not to store the credentials of the application under test. During recording, the username field is captured as a variable placeholder (not the value you typed) and the password field is masked and never recorded. The real credentials used to replay a test come from a Test Account that you configure in Rheonox QA+, where they are stored encrypted at rest and injected only at run time on the server side. Your QA+ own password is never stored by the extension.
How data is used
Solely to provide the disclosed purpose: create, store and replay your test cases in your Rheonox QA+ tenant. Recordings are sent
over HTTPS/TLS to the Rheonox QA+ API at https://qa.rheonox.ch. The extension never loads or executes
remote code; its full functionality is contained in the published code.
Limited use
The use of information received through the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell your data, do not use it for advertising or credit purposes, and do not transfer it to data brokers.
Recipients
Data is processed by Rheonox Technologies and its host, Infomaniak Network SA (Geneva, Switzerland). It is not shared with any other third party. Rheonox staff do not read your recordings except with your explicit consent (e.g. a support request you open) or where strictly necessary for security (e.g. investigating abuse).
Retention
Recordings and their media live in your Rheonox QA+ tenant. Retention is configurable per organisation; by default, test recordings and videos are automatically anonymised or deleted after 90 days.
Permissions the extension requests, and why
- storage: keep your settings and QA+ session token on your device.
- activeTab, scripting, tabs: place the recorder into the tab you actively choose to record, and coordinate start/stop.
- Access to the site you record: read the page you are recording and send the resulting steps to the QA+ API. This access is used only on the application you actively record; the extension does not monitor your general browsing.
Consent
Nothing is recorded until you open the extension, sign in, name a test and press Start. Recording stops when you press Stop & Send or close the session.
Your rights
Access, rectification, erasure, objection, portability. To exercise them: contact@rheonox.com. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your national data-protection authority.
Changes
We may update this policy; the “last updated” date above reflects the current version.