PTC Visual QA Chrome Extension — Privacy Policy and GDPR Compliance

Last updated: April 28, 2026

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Policy for the PTC Visual QA Chrome extension (“Extension”), but you can find out more details about any of these topics by reading the full policy below.

What personal information do we process?
When you use the Extension and explicitly start a recording session, we may process information such as URLs of the active tab, interaction events, screenshots, page metadata, selectors describing interacted elements, and technical information required to operate the service.

Do we process sensitive personal information?
The Extension is not intended to collect information for the purpose of identifying individuals, although recorded website content may incidentally contain personal or sensitive information depending on how the Extension is used by the client.

Do we receive information from third parties?
No. The Extension does not collect information from third-party data providers.

How do we process your information?
We process information to provide the Visual QA functionality, allow replay and debugging of recorded sessions, improve service reliability and security, and maintain the operation of the Extension and connected PTC services.

In what situations and with which parties do we share personal information?
Recorded sessions and screenshots are sent only to the PTC API endpoint configured by the user. By default, this endpoint is https://app.ptc.wpml.org.

How do we keep your information safe?
We implement appropriate technical and organizational security measures designed to protect the information processed through the Extension.

What are your rights?
Depending on your location, you may have rights under applicable privacy laws, including rights related to access, correction, deletion, restriction, or objection to processing.

How can you contact us?
hello@wpml.org

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
4. COOKIES AND TRACKING TECHNOLOGIES
5. HOW LONG DO WE KEEP YOUR INFORMATION?
6. HOW DO WE KEEP YOUR INFORMATION SAFE?
7. WHAT ARE YOUR PRIVACY RIGHTS?
8. CONTROLS AVAILABLE TO USERS
9. DO WE MAKE UPDATES TO THIS NOTICE?
10. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

1. WHAT INFORMATION DO WE COLLECT?

The Extension is designed to collect technical and operational information required for website quality assurance and debugging workflows, rather than information intended to identify individuals.

However, depending on the content of the recorded website, screenshots, URLs, or interaction events may incidentally contain personal data or other user-provided information visible on the page at the time of recording.

Access to a specific website is requested on a per-host basis the first time you initiate a recording or replay session on that site. Website access permissions may be revoked at any time through the Extension’s Permissions settings or through Chrome’s extension permission controls.

Information You Provide Through Recording Sessions

When you explicitly start a recording session, the Extension may collect and process:

• The URL of the active browser tab
• Click, input, and scroll events
• Full-page screenshots captured manually or automatically
• Page metadata such as viewport size, document language, browser user agent and version, and OS
• Selectors describing interacted elements, including CSS selectors, XPath expressions, ARIA labels, and element IDs

Recording stops when you click “Stop & Save.”

The Extension does not record activity in the background and does not access tabs or websites that you have not explicitly granted permission to access.

Information Stored Locally On Your Device

The Extension may store certain information locally using chrome.storage.local, including:

• Configured PTC API endpoint URLs
• Authentication or access tokens
• Locale strategy settings
• Saved scenarios pending upload
• Granted host permissions
• The projectId
• The projectName

Authentication Data

The Extension authenticates with PTC using an OAuth-style authorization flow. When you select “Connect to PTC,” you are redirected to the PTC web application to authorize access to a specific project.

After authorization, PTC issues a project-scoped access token that is stored locally on your device and used to authenticate requests between the Extension and the configured PTC endpoint.

The Extension does not collect, process, or store your PTC password or full account credentials.

Access tokens may be revoked at any time locally through the Extension settings, or server-side through the PTC dashboard or project settings.

Automatically Collected Technical Information

We may automatically process limited technical information necessary for service operation and security, such as:

• Session creation
• Test connection calls
• Recordings and uploads

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information to:

• Provide and maintain the Visual QA functionality
• Enable recording and replay of website interactions
• Support quality assurance workflows for translated websites
• Troubleshoot technical issues
• Maintain platform security and prevent abuse
• Comply with legal obligations

We only process information when we have a valid legal basis to do so under applicable law, including:

• Performance of a contract
• Legitimate interests
• Legal obligations
• Your consent where required

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

Recorded sessions and screenshots are uploaded exclusively to the PTC API endpoint configured in the Extension settings.

By default, the Extension uses:
https://app.ptc.wpml.org

Users may alternatively configure a self-hosted or staging PTC instance. In those cases, information is transmitted only to the configured endpoint.

We do not sell personal information.

We do not share information with third parties for:

• Advertising
• Profiling
• Credit evaluation
• Unrelated commercial purposes

We may use infrastructure and hosting providers required to operate the PTC platform and related services, including cloud service providers.

We may also disclose information:

• Where required by law
• To comply with legal obligations
• To protect our rights, users, systems, or services
• In connection with security investigations or incident response activities

4. COOKIES AND TRACKING TECHNOLOGIES

The Extension itself does not use advertising cookies or third-party tracking technologies.

The Extension may use browser storage mechanisms required for functionality and configuration persistence. If the user selects the cookie or wpml locale strategy, the Extension may set cookies on the third-party site during replay.

Any cookies associated with websites visited by users are controlled by those websites and not by the Extension.

5. HOW LONG DO WE KEEP YOUR INFORMATION?

Information stored locally remains on your device until you:

• Remove it
• Uninstall the Extension
• Clear browser extension storage
• Upload and delete pending scenarios

Information uploaded to a PTC endpoint is retained according to the retention practices of the corresponding PTC instance.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented reasonable technical and organizational measures designed to protect information processed through the Extension.

These measures may include:

• Encrypted communications
• Authenticated API access
• Restricted access controls
• Monitoring and logging
• Infrastructure security protections

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

7. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your jurisdiction, you may have rights under applicable privacy laws, including:

• The right to access your personal information
• The right to request correction
• The right to request deletion
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent where applicable

To exercise these rights, contact us using the details provided below.

8. CONTROLS AVAILABLE TO USERS

The Extension includes several privacy and permission controls.

Per-site Permissions

The Extension cannot record or access a website unless you explicitly grant permission using “Allow on this site.”

Granted hosts can be reviewed and revoked at any time.

Optional Browser Permissions

Certain permissions, including cookies and webNavigation, are requested only when features requiring them are used.

These permissions may be revoked at any time through browser or Extension settings

Use of Chrome Debugger and DevTools Protocol

The Extension may use the Chrome Debugger API and Chrome DevTools Protocol exclusively to capture full-page screenshots during an active recording or replay session initiated by the user.

Debugger access is limited to the specific browser tab where the session was explicitly started and is automatically detached when the session ends.

The Extension does not use debugger functionality to:

• Inspect unrelated tabs
• Monitor browsing activity outside active sessions
• Modify unrelated website content
• Observe activity beyond the recording or replay session initiated by the user

Uninstall and Local Data Removal

Removing the Extension deletes locally stored configuration and permission data associated with the Extension.

9. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this Privacy Policy from time to time to reflect changes in:

• Legal requirements
• Technical implementations
• Security practices
• Service functionality

The updated version will be identified by an updated “Last updated” date.

10. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO), Mercedes Barreda, by email at hello@wpml.org, by phone at +17029973025 (Skype), or contact us by post at: