Your recording stays here.

Screen, microphone, and webcam capture all happen in your browser. The file is assembled on your machine and saved straight to it. Nothing is uploaded while you record or edit — there is no endpoint on this site that could receive a frame.

Recent recordings are kept in your browser's own storage (IndexedDB) so you can reopen them, along with the edits you made. They never leave it, and clearing your site data removes them.

Asking for a link is the one action that sends anything anywhere. When you do, a copy of the finished clip — rendered smaller than the download — is uploaded to storage we run on Cloudflare R2. The original recording stays on your machine either way.

A link is unlisted, not private. The address is long and random, so nobody will guess it and it is asked not to be indexed — but anyone you give it to can watch the clip, and so can anyone they pass it on to.

Every shared clip is deleted automatically 24 hours after it was made, and you can delete it sooner from the browser that created it.

One number is kept about a shared clip: how many watched it, shown on its page and counted when the clip starts playing. That is the whole of it — a number, deleted with the clip. There is no list of views, no addresses, no referrers, and nothing that says who any viewer was.

Counting once per person rather than once per page load needs some way to recognise a repeat, so a marker is written for a couple of hours: the clip's id and a salted hash of the address — the same kind of hash the limits below use. It cannot be turned back into an address, it is not joined to anything, and the same cron that deletes clips deletes it.

To keep the service free and to stop it being used as free file hosting, the upload endpoint counts how much has been uploaded each day, and how much from one address. It does that against a salted hash rather than the address itself, so the counters cannot be turned back into a record of who was there. Cloudflare Turnstile checks that there is a person present before an upload is accepted.

There are no accounts, no cookies for tracking, no analytics, and no advertising. Nothing you record or edit is associated with an identity, because there is no identity to associate it with.

The optional Kırmızı Companion extension exists for one reason: a web page cannot observe the mouse on surfaces it does not own, so a recording alone has no idea where you clicked. The extension supplies that, and only that.

While a recording is running it collects pointer positions and click times, immediately converted to fractions of the screen or viewport. It reads nothing else — not the address of any page, not its content, not what you type, not what any element is.

Those positions are held in memory and handed to the Kırmızı tab when the recording stops, then discarded. They are never written to disk by the extension and never sent over the network. The extension requests no network access at all.

The site is served by a hosting provider which — like every web host — processes basic request data such as IP addresses to deliver the page. Shared clips are served from Cloudflare, which does the same. That is the full extent of what a visit involves.

Kırmızı is open source. If any of the above matters to you, you can read the code rather than take our word for it, including every line of the extension.

github.com/canbedir/kirmizi