POLICY / LOCAL-FIRST

Privacy

Effective August 27, 2026

Version Replay is designed so webhook fixtures stay on your machine. The CLI has no analytics, telemetry, account system, hosted relay, or automatic fixture upload.

Data the CLI stores

The CLI stores its configuration and the fixtures you explicitly capture or import in the vault directory you choose. Redaction is applied before fixture data is written. If you enable encrypted storage, fixture contents are protected with AES-256-GCM using a key derived from your passphrase with Argon2id. The passphrase is not stored.

Network access

Replay requests are restricted to loopback hosts such as localhost, 127.0.0.1, and ::1. The CLI contacts Sociobot only when you explicitly activate a Pro license or when a cached Pro verdict older than 24 hours needs reconciliation. The license token is sent to Sociobot for verification.

Website storage

The website stores an optional theme preference and, if you buy or restore Pro, your license token and its cached verdict in browser local storage. The token is removed from the address bar immediately after the checkout return. The JSON comparison demo runs entirely in your browser and does not upload either fixture.

Payments and logs

Sociobot/Dodo is the merchant of record and processes checkout and refunds under its own policies. This site has no advertising cookies and no behavioral analytics. Hosting infrastructure may retain short-lived security and request logs such as IP address, requested path, and user agent.

Your control

Delete a CLI vault by removing the directory you created. Remove the CLI license with vr license remove. Clear the website’s local storage through your browser settings to remove its license and theme data.

Contact

For privacy questions, open an issue in the Version Replay repository without including real webhook payloads or license tokens.