Privacy policy.

Short version: Bugback keeps what it records on your Mac. It sends data to Jira when you tell it to. If you buy Pro, it also checks your licence key with Polar. It sends nothing to anybody else. I do not collect analytics, crash reports or accounts.

Who I am

Bugback is a sole trader business in New Zealand ("I"). For privacy questions, write to hello@bugback.app.

What the Bugback app does with your data

• Screen footage. Recorded into a rolling buffer in memory, encrypted with a key that exists only while the app runs. Longer buffers spill older footage into an encrypted temporary file that is deleted when you pause or quit. I never receive it.
• Saved clips. Written to your Movies/Bugback folder, or the folder you choose, as ordinary files. They stay there until you delete them.
• What you did. Off unless you turn it on. When on, your clicks, shortcuts or typing are kept in memory with the footage and erased when you pause or quit. Keys typed into password fields are never recorded.
• System details. When you include them, a ticket gets your Mac model, macOS version, screens, battery state, language, time zone and the app that was in front. It never includes your name, computer name or serial number.
• Settings. Stored in a file on your Mac. They contain your choices, the address of your Jira site, your Jira name and email, your chosen project, and the keys of the tickets you sent clips to lately. They do not contain your sign-in, which is in the Keychain.

What leaves your Mac

Only when you connect Jira or press send:

• To Atlassian (auth.atlassian.com, api.atlassian.com and your own atlassian.net site): the video, notes, steps and details you chose to send, and the requests needed to list your projects and tickets. Atlassian's privacy policy covers what it does with them. Bugback asks for the permissions to read and write Jira work, to read your Jira user, and to stay signed in.
• To a token service that I run on Cloudflare: the one-time code from Atlassian's sign-in, and later your refresh token, so the sign-in can be completed and renewed without a secret inside the app. It does not store or log them and never receives a clip. Cloudflare, as the host, handles the requests in transit.

Your Jira sign-in or API token is kept in the macOS Keychain. Disconnect in Settings and it is removed.

If you buy Pro, Bugback checks your licence key with Polar (api.polar.sh), who sells Pro, when you enter the key, when Bugback starts and about once a day. That call carries the key, Bugback's organization id at Polar, and a short name for your Mac made from a random number, never from your Mac's name or hardware. It carries nothing about your screen, your clips or your Jira. As with any web request, Polar sees your internet address. The key is kept in your Keychain; remove it in Settings, under Plan, and it is forgotten.

Polar is the seller of Pro, so Polar, not me, holds your purchase details such as your name, email and payment, and its privacy policy covers them. Bugback never sees your card. The 14 day free trial is counted on your Mac and sends nothing. If you never enter a key, nothing is sent to Polar.

This website

The website uses no cookies, no analytics and no tracking. My host, Cloudflare, keeps ordinary server logs of requests (such as the address of the visitor) for security and to run the service. If you email me, I keep your email and my reply so I can help you, and delete them when they are no longer needed.

Email and text messages

I send no marketing emails or text messages, and this website has no sign-up forms. I reply to people who write to me. If that ever changes, I will ask first and in writing, you will be able to say stop at any time, and nothing will be sent before you agree.

Your rights

Because I hold almost nothing about you, there is little to ask for. If I do hold something, such as an email you sent, you can ask to see it, correct it or have it deleted. I follow New Zealand's Privacy Act 2020, and the GDPR for people in the European Union and United Kingdom. You can complain to the New Zealand Office of the Privacy Commissioner or to your local regulator.

Children

Bugback is a tool for working developers and testers and is not aimed at children.

Changes

If this policy changes in a way that matters, I will change the date above and say what changed on this page.