Privacy

Your HAR stays in your browser.

ReqRescue is designed so its hosted server does not need your trace in order to analyze it.

Local trace processing

HAR reading, validation, triage, redaction, previews, reports, and exports run locally in a browser worker. ReqRescue does not send HAR contents, file names, URLs, headers, cookies, bodies, or generated reports to its application server.

Product events

The hosted build records a small allowlist of product events, such as opening the page, completing the demo, or exporting a report. Each event may contain a random pseudonymous session identifier stored in your browser, an acquisition source, or optional feedback you choose to type. Feedback is limited to 220 characters. Do not place secrets or personal data in feedback.

Local storage

The pseudonymous session identifier and any incident briefs you choose to save remain in this browser's local storage until you clear site data. ReqRescue has no account system, payment verification, or cloud case storage.

Hosting records

Cloudflare may process ordinary technical request data needed to serve and protect the website, such as IP address, user agent, and request timing, under its own infrastructure policies. That is separate from HAR processing, which remains local.

Redaction limitations

No automated sanitizer can recognize every private value or product-specific identifier. ReqRescue removes bodies, credentials, common secrets, private hosts, IP addresses, and unknown vendor fields, but you must review a sanitized export before sharing it.

Last updated: July 29, 2026.