Back to checker

Privacy Policy

Last Updated: February 13, 2026

BundleCheck processes package names and versions submitted by users. We store request metadata required for caching, reliability, and service quality.

We do not request account signup for core usage. Contact is handled through the BundleCheck GitHub profile.

Operational telemetry may include timestamp, cache status, response timing, and error category. We do not sell personal data.

What Data We Collect

  • Package Queries: Package names, versions, and request metadata are cached to improve performance and reduce load on npm registry.
  • Analytics: We collect product analytics (for example page views and interaction events such as bundle checks, cache-hit vs fresh results, and response timing) to improve performance. We do not intentionally send direct personal identifiers (such as name or email) in analytics events.
  • IP Addresses: We collect IP addresses for rate limiting and abuse prevention. IP addresses are immediately hashed (anonymized using SHA-256) and never stored in plaintext. The hashed values cannot be reversed to identify you. We do not use IP addresses for tracking, profiling, or marketing purposes.
  • Technical Data: We may collect technical information such as browser type and device type from browser requests for support and debugging purposes.

Third-Party Services

We use the following third-party services that may collect and process data:

  • Cloudflare: Infrastructure and CDN provider. Processes requests and may collect IP addresses for security and performance.
  • Google Analytics (GA4): Product analytics provider used to measure usage, engagement, and feature performance.
  • Railway: Hosting provider for bundler service. Processes package bundling requests.
  • npm Registry: Package metadata and tarballs are fetched from the public npm registry.

How We Use Your Data

We use collected data for the following purposes:

  • To provide and improve the Service
  • To cache bundle results and improve response times
  • To detect and prevent abuse, fraud, and security incidents
  • To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

Data Retention

  • Bundle Cache: Cached bundle results are stored indefinitely in our database for performance optimization. KV cache expires after 7 days.
  • Analytics Data: Aggregated analytics are retained for up to 2 years. No personally identifiable information is stored.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Right to Data Portability: Request transfer of your data to another service (where technically feasible).
  • Right to Object: Object to processing of your personal data for certain purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us through the BundleCheck GitHub profile. We will respond within 30 days.

Cookies and Tracking

We use Google Analytics (GA4) to understand product usage and improve the service. GA4 may set first-party cookies or use similar browser storage mechanisms to measure sessions and engagement. We do not use analytics for behavioral advertising.

Theme preference is stored in your browser's local storage, not cookies. You can clear it via your browser settings.

Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page. Your continued use of the Service constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, requests, or concerns, visit the BundleCheck GitHub profile