Know what you’re installing.

Before someone joins

The SDK asks whether an approved interview invitation is available. Its application request body contains exactly these three fields:

{
  "operation": "offer",
  "key": "your public workspace UUID",
  "device": "a random browser-session identifier"
}

The SDK writes no cookies or localStorage. Sightspool’s own website and signed-in app have separate authentication and analytics behavior described in the privacy notice.

After someone chooses to participate

Clicking the launcher opens Sightspool’s interview experience in an isolated panel on the product page. Minimize preserves the same session; it does not mute, stop or withdraw an interview. The participant reviews eligibility, the thank-you offer and research/recording consent before starting. Recording, transcription and analysis are separate server features; they are not hidden inside the invitation SDK.

• Collected during an interview: consent and eligibility receipts, interview audio when agreed, transcript, operational call records and derived findings.
• Access: research belongs to the client workspace. Its authorized members and the service processes needed to deliver the interview have access under the product’s access controls.
• Retention and withdrawal: the approved interview specifies its retention period, up to 30 days in the current User Hours flow. Withdrawal or expiry triggers removal of audio, transcripts and derived findings. Removing the SDK only stops future recruitment; it does not delete interview records, account records or provider logs.
• Providers: hosting/storage use Vercel and Supabase; the voice path uses LiveKit, with Twilio for configured phone handoff; transcription/analysis use OpenAI. The exact path depends on the enabled features. See the privacy notice for wider product providers and contact us for a deployment-specific processing inventory.
• AI use: interview material is processed to transcribe and analyse the research. The privacy notice states that workspace content and research responses are not used to train models.

The browser SDK source cannot establish hosting regions, provider log retention or backup deletion times. A verified deployment-specific statement covering those details and the full provider inventory is still being prepared. If your organization requires it for installation approval, contact privacy@sightspool.com before proceeding.

Inspect the exact release

Version numbers identify a release; hashes identify its bytes. The script URL includes both, and an integrity attribute lets the browser reject a modified bundle. The manifest and source snapshot are available beside the bundle.

Review this build, its integrity hash and source snapshot →

Try the SDK and inspect its requests

The demo runs this built SDK against simulated offer responses. It displays request fields and lifecycle state, creates no interview and requests no microphone. It does not certify production infrastructure or replace an independent review.

npm installation

npm install --save-exact @sightspool/sdk@0.4.0

Commit your lockfile and review upgrades. Our release workflow uses npm trusted publishing with provenance and verifies the tag against the package version. Check the package’s npm provenance record to verify the publishing workflow. Provenance links source and build history; it does not certify that code is secure. How to check npm provenance.

Script installation and self-hosting

Go live supplies your workspace key, exact script URL, SHA-384 integrity, anonymous cross-origin loading and no-referrer policy. Keep them together. Avoid the mutable /sdk.global.js alias when you need controlled upgrades.

You can download and serve the reviewed bundle yourself. Keep its hash unchanged and explicitly set data-sightspool-endpoint to your Sightspool workspace host; otherwise script auto-init uses the bundle’s host. Self-hosting the bundle does not self-host the interview service.

openssl dgst -sha384 -binary sdk.global.js | openssl base64 -A

You control where it runs

• Audience: choose all_visitors or signed_in. There is no implicit default. Match this to your approved research plan.
• Pause: Sightspool.pause() removes the invitation and stops offer requests. resume() resumes for the selected audience.
• Remove: call destroy() to stop recruitment timers and listeners, then remove the loader/component and package. An already opened interview panel remains reachable until you leave the page. You may remove the specific sessionStorage key above if you also want to clear the SDK’s local session identifier.
• Rollback: retain the previously reviewed bundle and matching hash or restore the previous lockfile. Test compatibility with the current interview service; do not roll back to the retired 0.3.x capture API.

Offer polling runs every 15 seconds while the page is visible and the selected audience is eligible, plus initialization and explicit lifecycle changes. One current request is in flight, with a ten-second timeout. Pausing, identity changes, hiding the tab and destruction invalidate late responses. Failures remove the invitation and are handled without throwing into normal host-page interaction.

Bundle and gzip sizes on the release page are measured build artifacts, not a promise about page speed. Test your app’s responsiveness, layout, network use, slow loads, blocked storage and logout on your supported browsers. The SDK uses inline launcher styling; validate it against your CSP. Preserve your CSP and nonce rules—do not disable them to make installation pass.

Security questions and review status

No independent security audit is claimed for research SDK 0.4.0. Automated checks cover request fields, identity exclusion, stale responses, cleanup and artifact integrity. Their scope is narrower than a security assessment of the SDK and interview backend together.

Report a suspected vulnerability privately to security@sightspool.com. Include the version, affected feature and a minimal reproduction without customer data. See security.txt for the existing disclosure contact and scope. Data-access and deletion questions go to privacy@sightspool.com.