Privacy Policy
Last Updated: February 13, 2026
BundleCheck processes package names and versions submitted by users. We store request metadata required for caching, reliability, and service quality.
We do not request account signup for core usage. If you submit contact, feedback, or beta access request details, that information is used only for support and product communication.
Operational telemetry may include timestamp, cache status, response timing, and error category. We do not sell personal data.
What Data We Collect
- Package Queries: Package names, versions, and request metadata are cached to improve performance and reduce load on npm registry.
- Feedback and Beta Access Requests: When you submit feedback or request beta API access, we collect your optional name, email, submitted content, submission timestamp, and browser user-agent. Your IP address is not stored; it is hashed only for rate limiting and not retained.
- Analytics: We collect product analytics (for example page views and interaction events such as bundle checks, cache-hit vs fresh results, and response timing) to monitor service health and improve performance. We do not intentionally send direct personal identifiers (such as name or email) in analytics events.
- Error Tracking: We use Sentry for error monitoring. Error reports may include browser type, error messages, and stack traces, but do not contain personal information.
- IP Addresses: We collect IP addresses for rate limiting and abuse prevention. IP addresses are immediately hashed (anonymized using SHA-256) and never stored in plaintext. The hashed values cannot be reversed to identify you. We do not use IP addresses for tracking, profiling, or marketing purposes.
- Technical Data: We may collect technical information such as browser type and device type from error reports (Sentry) and feedback submissions for support and debugging purposes.
Third-Party Services
We use the following third-party services that may collect and process data:
- Cloudflare: Infrastructure and CDN provider. Processes requests and may collect IP addresses for security and performance.
- Sentry: Error tracking and monitoring. Collects error data and technical information to improve service reliability.
- Google Analytics (GA4): Product analytics provider used to measure usage, engagement, and feature performance.
- Railway: Hosting provider for bundler service. Processes package bundling requests.
- npm Registry: Package metadata and tarballs are fetched from the public npm registry.
How We Use Your Data
We use collected data for the following purposes:
- To provide and improve the Service
- To cache bundle results and improve response times
- To monitor service health, performance, and uptime
- To respond to feedback and support requests
- To detect and prevent abuse, fraud, and security incidents
- To comply with legal obligations
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
Data Retention
- Bundle Cache: Cached bundle results are stored indefinitely in our database for performance optimization. KV cache expires after 7 days.
- Analytics Data: Aggregated analytics are retained for up to 2 years. No personally identifiable information is stored.
- Feedback and Beta Requests: Retained for operational purposes. You may request deletion by contacting [email protected].
- Error Logs: Error data in Sentry is retained for 90 days.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Deletion: Request deletion of your personal data (subject to legal retention requirements).
- Right to Data Portability: Request transfer of your data to another service (where technically feasible).
- Right to Object: Object to processing of your personal data for certain purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
Cookies and Tracking
We use Google Analytics (GA4) to understand product usage and improve the service. GA4 may set first-party cookies or use similar browser storage mechanisms to measure sessions and engagement. Other third-party services (such as Cloudflare and Sentry) may also use cookies or similar storage for security, reliability, and error monitoring. We do not use analytics for behavioral advertising.
Theme preference is stored in your browser's local storage, not cookies. You can clear it via your browser settings.
Children's Privacy
The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page. Your continued use of the Service constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions, requests, or concerns, contact us at:
Email: [email protected]