Cawght captures API requests and responses ONLY when you explicitly click "Start Recording". No data is collected in the background.

Data collected during recording: HTTP method, URL path, request/response bodies, and status codes for the active tab.

This data is sent to your configured AI provider (Gemini, OpenAI, or Anthropic) using YOUR API key for analysis. We do not store your API key on our servers — it stays in your browser's local storage.

Account data (email, hashed password) and scan results are stored on our server. All database queries are scoped to your account — you cannot access another user's data.

We do not sell, share, or transfer your data to third parties. Full policy: http://34.93.154.243/privacy