Overview
QA Deck is a Chrome extension that helps quality assurance teams generate test cases and automation scripts. We respect your privacy and are committed to transparent data practices.
Data Collection
What We Collect
- Authentication Data: Email address and authentication tokens when you sign in via qadeck.com
- Page Content: DOM structure and element metadata when you use the Scan feature on webpages you choose
- Generated Content: Test cases, scripts, and locators you create and save
- Extension Usage: Features used and basic interaction telemetry
What We Don't Collect
- ✓ We do not track which websites you visit outside of the extension
- ✓ We do not collect passwords or sensitive credentials
- ✓ We do not collect browser history
- ✓ We do not collect personal information beyond your email
- ✓ We do not sell data to third parties
How We Use Your Data
- Page Scanning: DOM content you scan is sent to Claude API to generate test cases and automation scripts
- Cloud Storage: Your generated test cases and scripts are stored in Firestore to sync across devices
- Service Improvement: Aggregated usage analytics to improve the extension (no personal data included)
- Support: To help you with technical issues if you contact support
Third-Party Services
QA Deck uses the following third-party services:
- Anthropic Claude API: For generating test cases and automation scripts from page content
- Google Firebase: For authentication and cloud data storage
- Chrome Web Store: For extension distribution
Each service has its own privacy policy. We recommend reviewing their policies at:
Local Processing
QA Deck includes a local backend mode (via npx qa-deck-backend) that lets you:
- ✓ Run the Capture (recording) feature entirely on your machine
- ✓ Keep page data local without sending to the cloud
- ✓ Use Claude API offline fallback directly from the extension
When using local mode, your data never leaves your computer (except API calls you explicitly authorize to Claude).
Permissions
The QA Deck extension requests these permissions:
- activeTab: To read the current page structure when you scan
- scripting: To inject and read page content (DOM)
- webNavigation: To track page navigation for session context
- tabs: To manage tabs for the Capture workspace
- identity: To sign you in with your Google account
- storage: To save your projects and preferences locally
Data Retention
- Cloud Data: Your test cases, scripts, and projects are stored as long as your account exists
- Local Storage: Extension preferences and draft data are stored locally on your device
- API Logs: Claude API may log requests for service improvement (see Anthropic's privacy policy)
- Account Deletion: You can delete your account anytime — we'll remove all associated data
Security
We take security seriously:
- ✓ All communication with qadeck.com uses HTTPS encryption
- ✓ Authentication tokens are stored securely in your browser
- ✓ We do not store passwords — Firebase handles auth securely
- ✓ API keys and credentials should never be included in scans or generated code
Contact Us
If you have questions about this privacy policy or your data, please contact us at privacy@qadeck.com
This privacy policy may be updated periodically. We'll notify you of significant changes via the extension or qadeck.com.