Privacy Policy
Last updated: February 4, 2026
1. Introduction
This Privacy Policy explains how Bunny Inspector ("we", "our", or "us") collects, uses, and protects your information when you use our browser extension and website at inspect.bunnytech.app.
Key Principle: Your annotations and captured data stay on your device. We do not collect, store, or have access to the content of your annotations.
2. Information We Collect
Account Information
When you sign up using Google or GitHub, we receive:
- Your email address
- Your name (as provided by the OAuth provider)
- Your profile picture URL
Subscription Information
When you subscribe, we store:
- Your subscription plan (monthly or yearly)
- Subscription status (active, cancelled, etc.)
- Billing period dates
- Paddle customer ID (for subscription management)
Demo Usage (Website Only)
For the interactive demo on our website, we temporarily collect:
- Your IP address (for rate limiting)
- Number of demo requests made
This data is automatically deleted after 24 hours.
What We Do NOT Collect
- Your annotations or their content
- Screenshots you capture
- Websites you visit
- Console logs or network requests you record
- Any data captured by the browser extension
3. Chrome Extension Permissions
Our browser extension requests the following permissions:
- activeTab: To inspect and annotate elements on the current page you're viewing
- storage: To save your annotations and settings locally in your browser
- downloads: To export your annotations as a ZIP file when you choose to download
- sidePanel: To display the extension interface in Chrome's side panel
- Host permissions (<all_urls>): To enable inspection on any website you visit. All captured data stays local in your browser.
Important: All data captured using these permissions is stored locally in your browser using IndexedDB. We never transmit this data to our servers. You control when and how to export your data.
4. How We Use Your Information
We use the information we collect to:
- Authenticate you and manage your account
- Process subscription payments
- Verify your license when using the extension
- Prevent abuse (rate limiting)
- Respond to support requests
- Send important service updates (optional)
5. Third-Party Services
We use the following third-party services:
Paddle (Payment Processor)
Paddle processes all payments as our merchant of record. They collect payment information directly. See Paddle's Privacy Policy.
Google OAuth
If you sign in with Google, Google shares your basic profile information with us. See Google's Privacy Policy.
GitHub OAuth
If you sign in with GitHub, GitHub shares your basic profile information with us. See GitHub's Privacy Statement.
Turso (Database)
We use Turso to store account and subscription data. Data is stored in the EU (Ireland). See Turso's Privacy Policy.
6. Data Storage and Security
Extension Data: All annotation data captured by the browser extension is stored locally in your browser using IndexedDB. This data never leaves your device.
Account Data: Your account and subscription information is stored in our database hosted in the European Union (EU).
We implement appropriate security measures including encryption in transit (HTTPS), secure authentication tokens, and regular security reviews.
7. Data Retention
- Account data: Retained while your account is active, deleted upon request
- Subscription data: Retained for legal/accounting purposes as required by law
- Demo usage data: Automatically deleted after 24 hours
- Extension data: Stored locally on your device, controlled by you
8. Your Rights
You have the right to:
- Access: Request a copy of the data we hold about you
- Rectification: Request correction of inaccurate data
- Deletion: Request deletion of your account and data
- Portability: Request your data in a machine-readable format
- Objection: Object to certain data processing
To exercise these rights, contact us at privacy@bunnytech.app
9. GDPR Compliance (EU Users)
For users in the European Union, we process your data under the following legal bases:
- Contract: To provide the service you subscribed to
- Legitimate Interest: To prevent fraud and improve our service
- Legal Obligation: To comply with legal requirements
10. CCPA Compliance (California Users)
California residents have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
We do not sell your personal information.
11. Children's Privacy
Bunny Inspector is not intended for users under 16 years of age. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
13. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@bunnytech.app