Privacy policy

What BugRadar collects, why, where it is kept and how to have it deleted. Written in plain words.

Last updated 29 October 2026

Who we are

BugRadar (bugradar.in) checks online stores the way a shopper would and tells the store's team when something breaks.

For anything in this policy, write to hello@bugradar.in. We answer within 7 days.

What we collect and why

Free store check (bugradar.in/scan)
The store address you type, the result and screenshots of the store's public pages, and a one-way hash of your IP address so one visitor can't flood the checker. If you leave your email to hear more, we keep it to reply to you.
Contact form
Your name, email, company and message. They are sent to our inbox (hello@bugradar.in) so we can reply. They are not stored on the website.
Dashboard account
Your email address, used to sign you in with a one-time link and to send the alerts and summaries you switch on.
Daily checks
The store address, the results of each check, screenshots of the store's public pages and the alert settings you choose.
Store password (optional)
If a store is password-protected (a Shopify development or pre-launch store), its owner can give us the storefront password. See "Store passwords" below.
Shopify app
When a store installs BugRadar from Shopify, we read the store's name, its addresses (myshopify.com and its main domain) and its contact email. If no contact email is readable, we use the email of the staff member who opened the app. The app also has three read-only Shopify permissions, explained in "What the Shopify app reads" below.

What the Shopify app reads

Store menus
The links in the store's menus (main menu, footer and others): each link's title and address. So we can check that every menu link opens a working page.
Products
Products on sale in the online store: name, address, variant names (like size or colour), price, compare-at price, whether it's available to buy and whether it can be bought when out of stock. So we can check that shoppers see the same price as the admin, and catch items shown as buyable when they're sold out, or the other way round.
Theme
The name of the live theme and when it last changed, and a notice from Shopify when a new theme is published. So we can start a check the moment a new theme goes live.

These permissions are read-only: BugRadar never changes anything in your store. It doesn't read orders, customers or any shopper's personal data.

We read this while the store owner has the app open, and keep it with the store's check results in our database. We don't store a Shopify access token: a short-lived one is used only while the app is open.

What we never collect

We never collect the personal data of a store's shoppers. Our checks visit public store pages only: they never sign in as a customer, place orders, enter payment details, submit forms or subscribe to anything. Through Shopify we read only the menus, products and theme details listed above, never orders or customers.

We don't use advertising or analytics cookies on bugradar.in. The dashboard keeps your sign-in in your browser's storage so you stay signed in.

We don't sell any data, and we don't use store pages, screenshots or results to train AI models.

Store passwords

A store password is stored encrypted (Supabase Vault). It is never shown again, not even to the person who saved it.

Our checker reads it only while it is checking that store, and types it only into Shopify's own storefront password form on the store's exact address. It is kept out of screenshots, recordings, logs and error messages.

It is deleted when the owner clears it, when the store or workspace is deleted, or when the Shopify app is uninstalled.

Who helps us run BugRadar

Supabase
Database, sign-in and file storage, in Mumbai, India (AWS ap-south-1).
Our own check server
Runs the store checks (a rented server from Contabo).
Resend
Sends our emails: sign-in links, alerts, summaries and contact-form messages.
Vercel
Hosts bugradar.in and the dashboard.
Cloudflare Turnstile
Tells people from bots on the free store check.
Shopify
Installs and opens the BugRadar app inside the Shopify admin, and gives the app read-only access to the store's menus, products and theme.

Each of these only receives what it needs for its part of the work. Some of them may process data outside India.

Who can see what

Free store check results can be opened by anyone with the result's link, so you can share it. A result shows only the store's public pages.

Daily check results, screenshots and alerts are visible only to the members of the store's workspace and to the BugRadar team, who look at them to support you and to improve the checks.

A workspace member can make a read-only report link to share with someone else. Anyone with that link can open that one report until the link expires or is turned off.

How long we keep it

Daily checks and dashboard data
While the workspace exists. Ask us to delete the workspace and its stores, results, screenshots and alert settings are deleted.
Shopify app installs
Uninstalling pauses the checks and deletes the store password at once. Shopify then tells us to erase the store's data (48 hours later) and we delete the workspace the app made, with its results, screenshots and the menu, product and theme details read from Shopify.
Free store checks and emails you left
Until you ask us to delete them.

Your choices

You can ask to see, correct or delete the data we hold about you or your store at any time: write to hello@bugradar.in from the email address it concerns.

You can switch alerts and summaries off in the dashboard, and stop checks of your store at any time.

Store owners who don't want our checker to visit their store can block it in robots.txt; see bugradar.in/bot.

Changes

If we change this policy we update the date below. If a change affects how we use data you already gave us, we email the workspace owners first.