Read-only on the live product
focale never asks for production database write credentials. We do not accept service keys that can change your data. Looking at the repo is how we find the flows to watch. Git write is only for the watching pull request.What we drop
Passwords, tokens, and card numbers are stripped before they are stored. Identifiers are hashed. Browser cookies,authorization headers, and query strings that look like personal data are dropped too.
No session replay
focale does not record your customers’ screens, clicks, or sessions. Watching is the flows you confirmed, not a video of the app.The ingest key is not GitHub
FOCALE_DSN carries an ingest key. That key only lets your app send watching data to focale. It cannot open GitHub, merge pull requests, or read other repositories. Keep it in host secrets. Do not commit it.
focale is read-only toward your live product. We never ask for write access to your production data.