[SCdF]

I think you need to read their reply more carefully, because when I read:

> We will only store the actual requests that are sent when the user signs into the application.

It seems obvious to me that they are talking about your request that results from you logging into your postman account, that's why they say:

> If you do not create an account or use Postman without signing in then we will not collect any of the data

They are NOT saying "we record every REST request you generate from postman and send it to our servers".

[sbtmuller]

How are they able to make this feature work if they do not store your request/response data?

https://learning.postman.com/docs/postman/launching-postman/...

[SCdF]

Like I said in my other post, I don't use postman. Your HN post reads like they are doing this without your permission and secretly: akin to say, finding out that facebook records your microphone to sell you ads or whatever. This is what I am reacting to, that they are doing it without your permission.

So what actually is going on then, is that postman has a feature that you don't have to use, that you know about, that you know requires it stores request / response data, and it is doing just that.

[sbtmuller]

I'm not saying that they are hiding, but I believe most people saw this page and felt Postman does not collect request data under any circumstances. It felt like a sudden twist of story after I've contacted them and realized they have the sync feature. If I did not contact them then I would not have know they do collect request data when user is signed in.

https://support.getpostman.com/hc/en-us/articles/203815791-W...