Where your recordings live, and who can see them

Storage and links

• Recordings are kept in private storage. A viewer gets a short-lived link that TakeOne signs when they press play; no file has a public address.
• While you record, the take is also written to your own browser’s storage so a crash can be recovered; that copy is cleared a day after it has uploaded.
• Download your originals any time.

Sharing

• You choose who can watch each take: only you, anyone with the link, or anyone with the link and its password, until an expiry if you set one.
• A link’s password is stored hashed, and a viewer who unlocks it gets a session that expires.
• Unlisted links are kept out of search engines.
• Views are counted as a number. No record is kept of who watched.

Agents and apps

• An agent sees a take only when you connect it and give it access. API tokens are stored hashed, so only you ever see the value, and carry scopes: read, write notes, write edits, write transcripts, manage webhooks, publish.
• An agent connected by signing in holds only a short-lived pass. Each app your agents use is listed by the name it gives and can be stopped on its own; Disconnect or revoke cuts every one off at its next call.
• Each call a token or an app makes is logged with its time for 30 days, and so is each webhook delivery. Webhooks are signed, so your service can check they came from TakeOne.

The extension, the Mac app and the beacon

• The Chrome extension records only the tab you start it on, and nothing while no take runs. Your microphone and camera start off. It sends nothing anywhere but TakeOne.
• The beacon, the script that lets your own app report clicks, can run only on the hosts you name. A pinned copy for subresource integrity and a data sheet are ready for a security review.

What we don’t do

• No advertising, no analytics, no tracking pixels.
• No data sold, and none used to train anything.
• We look at a recording only to run the service or when you ask for help, and never publish it.

Deleting

Deleting a recording removes its files at once; its details stay for 30 days so a mistaken delete can be undone. Deleting your account, from Account and settings, removes every recording and its files, your links, tokens, webhooks and settings, and cancels any subscription.

Card payments go to our payment processor; we never see or store a card number. Who processes what, and where, is in the privacy policy. Questions to support@takeone.dev.