What the widget collects

What they wrote

The title and the optional description, as typed.

How to reach them

The email address they enter, or the identifier your own site passes to the widget. Never both unless you send both.

Where they were

The page URL and the referring URL.

Browser language

Used to pick the widget's language.

A hashed IP address

Used only for rate limiting. The raw address is never stored: it is hashed with a secret salt before it touches our database, and the hash cannot be turned back into an address.

Device and browser

Browser name and version, operating system, window and screen size, pixel density, time zone, language, light or dark mode, and how long the page took to load.

JavaScript errors

Up to ten uncaught errors from the page, with their stack traces.

Recent actions

Up to fifty steps: which elements were clicked, which forms were submitted, and which pages were visited. Identified by a CSS selector and, for buttons and links, their visible text. Never the contents of any field they typed into.

A screenshot, if they choose to attach one

Taken by the widget from the visible part of the page, shown to the person before sending so they can discard it, and never taken without them asking for it. Screenshots are deleted after 90 days.

The contents of forms

Not from your page, not from ours.

Console output and network traffic

The widget does not read either.

Cookies or tracking across sites

The widget sets no cookies and uses no browser storage. It cannot follow anyone from one site to another.

Anything at all, until someone submits

Recent actions and errors are held in the visitor's own browser and discarded when they close the tab. Nothing leaves the page unless they press send.