Browser Extension Privacy

SprintWatch.AI Capture is an optional Chrome/Edge extension that turns something you see in your browser — a screenshot, or a bug with its console errors — into a draft SprintWatch ticket. It requires a SprintWatch.AI account and does nothing until you explicitly capture something. It never creates a ticket automatically; every draft opens in SprintWatch for you to review and save.

• A screenshot of the current tab, taken when you click capture. You can annotate it with arrows and boxes, and the blur tool is baked into the image in your browser before anything is sent, so the un-blurred original never leaves your machine.
• Recent console errors and failed network requests, only on sites where you have explicitly turned error capture on, and only to explain the bug you are reporting. We capture the error message, the request URL, and the status code — never request or response bodies, headers, cookies, or form data.
• The page URL and title of the tab you capture, as context for the draft.
• Your note and the project you pick when sending the capture.

• Your browsing history, or any tab you did not explicitly capture.
• Request or response bodies, HTTP headers, or cookies.
• Keystrokes, form field values, or passwords.
• Anything at all on sites where you have not enabled capture.

Error capture is off by default and is enabled per site by you. The extension holds at most the 50 most recent error entries for a tab in memory, and discards them when the tab closes.

Sign-in uses the standard OAuth PKCE flow against the same Microsoft Entra External ID that secures the web app. The extension stores only a short-lived session token in your browser’schrome.storage.session, which is cleared when the browser closes. It does not store, transmit, or have access to any API keys or your password.

A capture is sent only to the SprintWatch.AI service for your own organization, over HTTPS, to produce a draft ticket. From there it is handled exactly as described in the main privacy policy — including the Azure OpenAI Service used to draft the ticket, with retrieval scoped by your organization’s own permission system. The extension sends to no other third party and contains no analytics or advertising SDK.

• activeTab / tab capture — to screenshot the tab you are on when you click capture.
• scripting — to collect console errors and failed requests on sites where you have opted in.
• storage — to hold your session token and per-site capture preference.
• identity — to complete the sign-in flow.

Uninstalling the extension removes its stored session token and preferences from your browser. Drafts you already sent live in SprintWatch and are managed there; deleting your organization removes them as described in the main policy.

Questions about the extension or a data request: ranatechnologies.uk