Gremlin UAT

Privacy Policy

In effect from 29 September 2026.

Gremlin UAT turns what a tester does on a website into a UAT script. This page says what it keeps, where it keeps it and who can see it.

What we keep

  • Recordings. While someone presses Record in the Chrome plugin or the page overlay, the steps they take on that website: clicks, text typed into fields, page addresses and a screenshot of each step. Password fields are never recorded; they show as hidden.
  • Projects and UAT plans. What the dev team types in: project names, website addresses, user names and roles, and plan details.
  • Login. A cookie that keeps the dev team logged in. It holds no personal data beyond the login email.
  • Google Drive connection. If a Project connects Google Drive: the Google account’s email address and a sign-in token, stored encrypted.

Nothing is recorded when Record is off. We use no ads, no tracking and no analytics.

Where it is kept

  • The site runs on Vercel. Recordings, projects and plans are kept in a MongoDB Atlas database.
  • When a Project has connected Google Drive, its step pictures are saved in that Google Drive folder instead of the database.
  • PDFs and exported zip files are made in your browser and saved on your own computer. We do not keep them.

Google Drive

Gremlin UAT asks Google only for the drive.file permission. That lets it see and change only the folder and pictures it creates. It cannot see anything else in your Drive. We use it for one thing: saving and showing a Project’s step pictures.

Gremlin UAT’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google data, use it for ads, or share it with anyone, and no person reads it except when you ask us to help with a problem.

You can take the permission back at any time in your Google Account under Third-party connections. The pictures already in your Drive stay yours.

Who can see it

The dev team that logs in to this site, and anyone they send a plan’s share link to. A share link opens only that one plan, to read and print. We do not sell or share data with anyone else.

Removing data

The dev team can delete scripts, plans and projects on the site. To have everything about you removed, or to ask what we keep, contact admin@grinninggremlin.com.

Changes

If this policy changes, the new version goes on this page with a new date.