Your work stays yours.

Targets, prepared browser sessions, screenshots, findings, reproduction steps, settings, and reports are stored locally. HECKLE does not upload them or run an analytics pipeline.

Evidence images are retained for the newest 50 runs for up to 30 days. Text reports remain in local history until you remove the application data.

The desktop app contacts Dodo Payments to activate and periodically validate a license. It contacts the public HECKLE release feed to check for signed updates. Scanning does not depend on a HECKLE cloud service.

Dodo Payments processes checkout, tax, receipts, refunds, and license-key delivery. HECKLE does not receive or store card details. Dodo’s own privacy terms apply to checkout.

After payment, Dodo includes the checkout email and license key in the return link so HECKLE can show the key once. The success page verifies the payment with Dodo, displays Dodo’s matching key, removes those details from browser history, and does not save them in the website database.

Diagnostic files are created only when you choose Export diagnostics. The standard archive excludes the license key, full URLs, page content, and screenshots. Evidence is included only after you select the separate evidence option.

Questions or deletion requests for commercial support records can be sent to tryhecklesupport@gmail.com.