BugDex Privacy Policy
Effective: 8 November 2026
BugDex is built around one promise: your bugs stay in your infrastructure. We never store your bug data. This policy explains exactly what that means.
"We" means Nikhil Ramesh Gevaria, Mumbai, India, who makes BugDex. "You" means anyone who installs or uses it.
What the extension captures
When a tester reports a bug, the BugDex browser extension captures:
- a screenshot of the visible part of the page, with the selected area marked
- the title and description the tester types, the severity, and the signed-in tester's name
- the page address (URL), page title and how far the page was scrolled
- technical details: browser and version, operating system, device type, screen and window size, language, time zone, colour scheme, network type and touch support
- build or version details, only if the page being tested publishes them
Where it goes
All of it is sent only to the Supabase project you connect BugDex to. That project lives in your own Supabase account, under your control and Supabase's terms.
We do not receive, collect, store, sell or share any of it. The extension has no analytics and sends nothing to us.
Accounts
Your BugDex account and password live in your team's own Supabase project, under its Authentication settings. We never receive or store your password.
Login address book
So you can log in from any browser just by typing your email, we keep a small address book: your email address, your team's name, and your team's project address and public key. Nothing else.
An entry is added only after you open a link we emailed you, which proves the address is yours. It's removed when your admin removes you from the team. To have it removed sooner, email us.
Emails we send
When an admin invites you, or you confirm your own email, we send the message from [email protected] using Resend, an email delivery service. Resend receives your email address and the message, nothing more.
What stays in your browser
The web app and extension keep a few settings in your browser so they work between visits: your project address and publishable key, your signed-in session, the last project used, and whether testing is switched on in a tab. They never leave your browser except to reach your own Supabase project.
Other services involved
- Supabase stores your data, in your own account.
- Cloudflare hosts the BugDex website and web app at bugdex.in. It serves the pages your browser loads, and like any web host it sees basic request information such as your IP address. Your bug data does not pass through it: your browser sends that straight to your Supabase project.
- Resend delivers the invitation and confirmation emails described above.
- Your team's ticketing tool, only if your team connects one to BugDex itself.
Our website
We use Cloudflare Web Analytics to count visits and how many people use BugDex each day. It uses no cookies and does not identify you, and it cannot see anything inside BugDex: no bugs, screenshots, project names or account details. Rules on our pages allow them to talk only to bugdex.in, your Supabase project and this analytics service.
Chrome Web Store
BugDex's use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
Children
BugDex is a workplace tool and is not directed at children.
Changes
If this policy changes, we will update the date above and publish the new version where you found this one.