Typed values are never captured in screenshots, replays or steps. Passwords, tokens, API keys, card numbers and email addresses are swept out of errors and requests before they leave the browser.

Can I hide more of a page?

Yes. Snags respects the privacy markers sites already use, such as data-private, .rr-mask and data-sentry-mask, and data-snags-mask and data-snags-block for its own.

Who can open an audit?

Anyone with the link, without an account. On Pro and Team a link can require a password, and free links expire after 7 days.

Can I delete what I’ve shared?

Yes. Delete a comment, an audit or your whole account at any time. Drafts that are never published are deleted after 7 days.

Private by default. Recorded only when you choose.

Snags records your own browser, only while you run an audit and only on that site. Typed values are never captured, and passwords, tokens and card numbers are swept out before anything uploads.

Add to Chrome Read the docs

app.snags.com/a/Qvq6Rpq0

Checkout reviewacme.com4 commentsShare

1Nothing happens when I tap PayCheckout · Open
2The heading should say “Checkout”Checkout · Fixed
3Footer links are too small to tapCheckout · Open
4Coupon field loses focus on typeBasket · Open

1Nothing happens when I tap Payacme.com/checkout

Steps before it

Opened /checkout−9.0s

Typed in Card number−6.2s

Clicked “Pay now”−3.1s

POST /api/pay 500−2.8s

What stays hidden

Typed valuesNever captured

Card numbersRedacted

Auth headersRedacted

RecordingThis site only

Showing what broke shouldn’t mean showing everything. Typed values never leave your browser, secrets are swept out first, and nothing is recorded until you start an audit.

Nothing private in the comment. And nothing sent until you publish.

Screenshots, replays and errors stay in your browser until you publish the audit. What leaves it is masked first.

Typed values never show, in screenshots, replays or steps.

Secrets are swept out, from errors and requests, before anything uploads.

Nothing until you audit, and then only on that site’s pages.

Works withLinearGitHubJiraand any MCP client

See integrations

How it works. Three steps, nothing to install on the site.

01Only when you audit
Nothing is read from a site until you start an audit there, and only on its pages.
02Masked in the browser
Typed values, secrets and marked regions are hidden before anything uploads.
03Shared on your terms
Passwords on links, workspaces for clients, and deletion whenever you like.

Plans from $5 a month, with links that never expire.

See pricing

Questions, answered.

No. Snags records only your own browser, while you run an audit. Nothing is added to the site.

More of the platform. The other parts of Snags.

Capture. What comes with a comment: the screenshot, replay, steps and errors.

Triage. Open, fixed or won’t fix, with replies, assignees and a check on the live site.

Sharing. One link anyone opens, with every comment, screenshot and replay.

Your next round of feedback, in one link.

Add to Chrome Security docs

Private by default. Recorded only when you choose.

Nothing private in the comment. And nothing sent until you publish.

How it works. Three steps, nothing to install on the site.

01Only when you audit

02Masked in the browser

03Shared on your terms