Privacy Policy

Effective date: 2026-10-13 · Seller: Yuyang Xiao, independent developer, China · Contact: arisxiao0209@mail.grokbot.com

Summary

BugPack runs entirely on your device. It has no accounts, no servers that receive your data, no analytics and no tracking. The extension itself makes no network requests.

What BugPack processes, and where

• Screenshots of the tab you choose to capture, when you click Screenshot or Full page.
• Console errors and warnings, failed network requests (URL, method, status, timing, an allowlist of diagnostic headers and a truncated request/response body) of the current tab — only after you open the toolbar, or from page load on sites where you explicitly enabled Always-on monitoring.
• Reproduction steps: which elements you clicked and which fields you typed into. Typed values are never recorded — only a placeholder such as “[redacted, 8 chars]”.
• Element snapshots you choose with Pick element (CSS selector and a truncated HTML snippet with form values removed).
• Environment info: browser and OS version, viewport, language, time zone, page URL.

Before anything is stored or exported, BugPack redacts common secrets: Authorization and Cookie headers, tokens/passwords/keys in URLs and JSON/form bodies, Bearer tokens and JWTs.

All of this is kept in your browser's memory and, when you export, in the extension's local storage (IndexedDB) on your device as “History”. You can delete any or all reports at any time from the History page; uninstalling the extension deletes everything.

What leaves your device

Only files you explicitly export (HTML, Markdown, AI context pack, PNG) are saved by your browser to your Downloads folder, and text you choose to copy to the clipboard. What you do with those files is up to you.

License keys

Pro license keys are verified offline with a cryptographic signature. The key contains a random license ID and a truncated hash of the purchase email — not the email itself. Payments are processed by our merchant of record, Creem (to be confirmed before launch); Creem's privacy policy applies to checkout and the payment data you give them. We receive only your email, order ID and purchase status.

Permissions

• activeTab, scripting: inject the toolbar into the tab you click on.
• storage, unlimitedStorage: settings, license and local report history (screenshots can be large).
• Optional host access: only if you turn on Always-on monitoring, and only for the sites you list.

Data sale and sharing

We do not sell, transfer or share user data with third parties, do not use it for advertising or creditworthiness, and do not use it for any purpose unrelated to the extension's single purpose: creating bug reports.

Children

BugPack is a developer tool not directed at children under 13.

Changes

We will update this page and the effective date if this policy changes.