Security and privacy

This page explains, in plain words, what Naviscroll does with your data and why the architecture makes most of the usual questions moot.

Your browser, your device

RecorderClicks and form entriesBefore-click screenshotsNever the typed text

EditorStep cardsMasks baked at exportStyles and Templates

LibrarySaved proceduresSearch, tags, favouritesLocal storage only

ExportsPDF, HTML, Markdown, CopySelf-contained filesNo external resources

Optional, off by defaultCloud AI drafting, with your own API keySends document text onlyNever screenshots, masks or your library

Local-first

Capture, screenshots, masking and the built-in document generator run entirely in your browser. Your library lives in the browser's local storage on your device. There is no account of record and no server holding anyone's documents.

What is never stored

Typed values. The extension records that a field was filled in (its label or type), never the text you typed. Native dropdowns record the field, not the option chosen.

Masking

Likely-sensitive fields are detected and masked automatically; you can mask anything else with a solid block or a blur. Masks are baked into the exported image pixels, so exported files contain no recoverable sensitive pixels. Detection is a heuristic: review screenshots before sharing.

Optional cloud AI

Off by default. When you opt in, only the document title, your tone and verbosity choices, and per-step text are sent to the provider you chose, with the API key you supplied. Screenshots and image data are never sent.

Exports

HTML exports are single self-contained files with no external resources and no network access. PDF and Markdown exports contain no scripts.

Reporting a security issue