Security at Brie

Brie is a bug reporting browser extension that captures the technical context developers need, without capturing the secrets they don’t. Sensitive data is redacted in your browser before anything is stored.

What Brie captures

A bug report can include a screenshot or video, browser console logs, network requests (with status codes and timing), the user actions leading up to the issue, and a session replay, plus browser, OS, and viewport details. You choose what to capture, and everything is shared through a single link.

Automatic data redaction

Every network request Brie captures goes through automatic redaction before it is stored. Brie uses regex patterns and a keyword list of 50+ sensitive field names to detect and replace sensitive values with [REDACTED_BY_BRIE]. This covers JWT/Bearer tokens, API keys (including sk-, cla-, and AWS/Azure/GCP/Stripe patterns), authorization and cookie headers, credential fields such as password and access_token, and financial data like credit card numbers and SSNs. For local and staging work you can add domains to a skip list; non-production URLs are skipped by default. See the data redaction feature for details.

Recording is blocked on sensitive pages

Session recording is automatically blocked on login pages, payment forms, password managers, and identity providers. You can also disable recording on specific domains with a per-host denylist, so you stay in control of what Brie can see.

Hosting and data in transit

Brie runs on Hetzner infrastructure in the European Union. All traffic between your browser, the Brie app, and the Brie API is encrypted in transit over HTTPS/TLS.

Data retention and deletion

By default, bug reports are retained for 90 days, after which they are deleted. You stay in control in the meantime, you can delete any report you have captured at any time, and you can exercise your GDPR data-subject rights, including access, rectification, and deletion. For full details and how to make a request, see our Privacy Policy.

Your privacy rights

Under GDPR you have the right to access, update, or delete your information, the right to rectification and to object, the right of restriction and data portability, and the right to withdraw consent. The Privacy Policy explains how to exercise each one.

Open source

The Brie browser extension is open source, so you can review exactly how capture and redaction work on GitHub.

Security FAQ

What sensitive data does Brie redact?
Brie redacts JWT/Bearer tokens, API keys (including sk-, cla-, hf-, and AWS/Azure/GCP/Stripe patterns), authorization and cookie headers, credential fields such as password, secret, and access_token, and financial data like card numbers and SSNs. Redaction happens in the browser before the request is stored, and matched values are replaced with [REDACTED_BY_BRIE].
Does Brie record passwords or payment pages?
No. Session recording is automatically blocked on login pages, payment forms, password managers, and identity providers. You can also disable recording on specific domains with a per-host denylist.
Where is my data hosted?
Brie runs on Hetzner infrastructure in the European Union. Traffic is encrypted in transit over HTTPS/TLS.
How long are bug reports kept, and how do I delete my data?
Bug reports are retained for 90 days by default, then deleted. You can also delete any report you have captured at any time, and you can exercise your GDPR data-subject rights, including access and deletion, see the Privacy Policy for how to make a request.