What stays with you.

Cueplane records the elements you explicitly point at, available DOM and source hints, voice or typed notes, and optional cropped screenshots. It adds no code to the application you review.

Speech is transcribed locally in the browser. The initial Whisper model downloads from Hugging Face. Password and recognized sensitive fields are excluded from screenshots; ordinary personal text is not automatically redacted. Review the evidence before submitting.

The companion reads local agent status and known project-folder metadata to show your own connections and projects. It does not return credentials or transcript contents during discovery. It identifies localhost apps from the listening process and canonical working folder. For remote apps, it checks bounded repository deployment files and compares same-origin script hashes with local build assets. It remembers only verified matches, shows the evidence, and refuses ambiguous matches. It does not scan your whole disk or upload the project list to this site.

Recordings and configuration live under ~/.local/share/dev-feedback with private filesystem permissions. The extension sends them to the companion on 127.0.0.1:20548. Deleting that folder removes the local records. Codex and Claude retain agent transcripts separately according to their own settings.

Submitting sends processed feedback and selected images to the coding-agent connection you select. Codex or Claude processes that material under its own terms. The companion checks machine identity, canonical folder, website origin and signed-in account. It never copies credentials or silently switches to API billing.

Chrome requires access across websites to capture selected screenshots. Remote capture needs browser access and a verified automatic match or an explicit site choice. Disabled sites remain disabled. Private typed notes can still be observed by page code installed before the extension’s key guard; avoid private notes on untrusted websites.