Privacy Policy
FederationPulse · Published by Monryte SRL · Last updated: 29 October 2026
Executive Summary (Local-First Guarantee)
FederationPulse is engineered strictly as a local-first developer diagnostics engine. We do not track your browsing history, we do not inspect your website's DOM payload for surveillance, and we never transmit your proprietary source code to external servers. Profiling, V8 memory metrics, listener tracking, and virtual hot-patching execute 100% inside your local browser or CI environment.
1. About Us and Data Controller
FederationPulse (“the Software”, “the Extension”, “we”, “us”) is owned and operated by Monryte SRL (“Monryte”), an EU registered technology enterprise. Monryte is the Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) for any limited personal data processed in connection with our website and software licenses.
Contact email for privacy and data subject inquiries: dev@monryte.com.
2. What Information We Process
A. Chromium DevTools Extension & Web Profiler
- Local In-Memory Telemetry: Micro-frontend container names, unmount timings, event listener identifiers, detached DOM node counts, and shared scope singletons. This data resides exclusively in temporary browser RAM and is discarded when the tab or DevTools session is closed.
- No Network Egress: The FederationPulse kernel does not phone home, does not transmit telemetry pingbacks, and has no analytics trackers embedded in its runtime.
B. Playwright CI SDK & Model Context Protocol (MCP)
- Playwright CI SDK (
@federationpulse/playwright): Executes entirely inside your private CI runners (e.g. GitHub Actions, GitLab CI). SARIF reports are produced locally and uploaded directly to your own repository's security tab. - MCP Server: Runs as a local Node.js process over standard input/output (stdio). Prompts and diagnostic outputs remain strictly between your local development machine and your chosen AI assistant (e.g. Claude Desktop, Gemini, Codex).
C. License Purchases & Billing (Lemon Squeezy)
- When you purchase a Pro or Enterprise subscription, payment processing is handled exclusively by our Merchant of Record, Lemon Squeezy, Inc.
- Lemon Squeezy collects payment credentials, billing address, and tax information under their own privacy policy. Monryte never sees, processes, or stores your credit card or bank details.
- We receive only transaction confirmation metadata: your email address, license key, subscription status (active/canceled), and tier.
3. Legal Basis for Processing (GDPR & UK GDPR)
We process limited customer data on the following lawful bases:
- Performance of Contract (Art. 6(1)(b) GDPR): To issue, activate, and validate your software license key and provide technical support.
- Legitimate Interests (Art. 6(1)(f) GDPR): To defend against software license piracy and maintain the integrity and security of our licensing infrastructure.
- Legal Compliance (Art. 6(1)(c) GDPR): To fulfill statutory accounting, taxation, and financial reporting obligations.
4. Sub-processors and Third-Party Services
We engage only reputable, compliance-vetted service providers to deliver our services:
| Provider | Purpose | Location & Safeguards |
|---|---|---|
| Lemon Squeezy, Inc. | Merchant of Record, payment processing, invoicing, license key generation | USA (EU Standard Contractual Clauses) |
| GitHub (Microsoft) | Source distribution, release assets, npm package registry | USA / Global (SCCs / Adequacy) |
| cPanel Shared Hosting (Monryte) | Static documentation and landing page hosting | European Union (GDPR compliant) |
5. California Consumer Privacy Act (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- We do not sell your personal information.
- We do not share your personal information for cross-context behavioral advertising.
- We do not collect sensitive personal information as defined by the CPRA.
- California residents may exercise their rights to know, delete, and correct personal information by emailing dev@monryte.com.
6. Data Retention and Deletion
Because the software is local-first, memory diagnostics and audit profiles cease to exist the moment you close the browser tab. License transaction records are retained for the duration of your active subscription plus statutory tax retention windows (typically 5 to 7 years in compliance with EU commercial law).
7. Your Rights Under GDPR
You have the following statutory rights regarding your personal data:
- Right to Access (Art. 15): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete license contact details.
- Right to Erasure (“Right to be Forgotten”, Art. 17): Request deletion of your customer record when no longer legally required.
- Right to Restriction (Art. 18) & Objection (Art. 21): Object to processing based on legitimate interests.
- Right to Data Portability (Art. 20): Receive your license details in a machine-readable format.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your national Data Protection Authority (DPA) or the European Data Protection Board (EDPB).
8. Security Measures
FederationPulse implements strict industry-standard technical safeguards: HTTPS encryption in transit, strict Content Security Policy (CSP) headers, isolated execution sandboxes for injected MV3 scripts, and zero third-party script injection into client pages.
9. Children’s Privacy
FederationPulse is designed exclusively for software developers and enterprise engineering teams. We do not knowingly solicit or collect data from anyone under 16 years of age.
10. Updates to This Policy
We may update this Privacy Policy periodically. Any revisions will be reflected with a refreshed "Last updated" date on this page.
11. Contact Us
For inquiries regarding this Privacy Policy or to exercise your privacy rights:
Monryte SRL
Attn: Data Protection Officer
Email: dev@monryte.com