> ## Documentation Index
> Fetch the complete documentation index at: https://docs.focale.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy and trust

> focale is read-only on your live product. No session replay. The ingest key is not a GitHub token.

Trust is structural, not a settings toggle.

## Read-only on the live product

focale never asks for production database write credentials. We do not accept service keys that can change your data. Looking at the repo is how we find the flows to watch. Git write is only for the watching pull request.

## What we drop

Passwords, tokens, and card numbers are stripped before they are stored. Identifiers are hashed. Browser cookies, `authorization` headers, and query strings that look like personal data are dropped too.

## No session replay

focale does not record your customers' screens, clicks, or sessions. Watching is the flows you confirmed, not a video of the app.

## The ingest key is not GitHub

`FOCALE_DSN` carries an ingest key. That key only lets your app send watching data to focale. It cannot open GitHub, merge pull requests, or read other repositories. Keep it in host secrets. Do not commit it.

<Check>
  focale is read-only toward your live product. We never ask for write access to your production data.
</Check>