Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains how Bistriy Sp. z o.o. (“Bistriy”, “we”, “us”) collects, uses, shares and protects personal data when you use BugsRadar: the website bugsradar.com, the web app app.bugsradar.com, the API at api.bugsradar.com and the BugsRadar packages on NuGet, npm and PyPI (together, the “Service”).

1. Who we are (data controller)

The controller of your personal data is:

You can contact us about this policy, your data or your privacy rights at support@bistriy.com. We have not appointed a Data Protection Officer; all data-protection matters are handled at that address.

2. Information we collect

Information you give us

• Account: your email address. You sign in with a one-time link we send to it; there is no password.
• Projects: the names of your projects and their API keys.
• Channels: the name of each channel and the credentials you enter for it - a Telegram bot token and chat ID, a Discord webhook URL, or a Pushover application token and user or group key.
• Payments: if you buy a paid plan, you pay through Stripe. We receive from Stripe and keep your customer and subscription identifiers, your plan and its period. We never receive your card details.
• Support: what you write to us when you contact us.

Information collected automatically

• Sign-in data: the codes of the one-time sign-in link; an identifier your browser generates; and a key your browser uses to sign its requests to our API, kept in your browser and on our server.
• Channel status: when a channel last delivered a message and the error a service returned, so that you can see whether a channel works.
• Technical data: IP addresses, browser type and request times in our server logs, and request counters we use to protect the Service from abuse.
• Website statistics: the website bugsradar.com counts visits with Google Analytics. For every visit it receives the pages you open, when you open them and where you came from, your browser, device, language and screen size, and your approximate location; it works the location out from your IP address and does not store the address itself. Only if you accept analytics cookies, it also receives the identifiers kept in those cookies, which tell one visitor from another.

3. Events your applications send

The BugsRadar package and API receive events from your applications: error messages, exception types and stack traces, log message templates and their properties, and context such as the environment, host name and application version.

An event stays in memory only until it is delivered to the channels of its project. Events are not written to disk or to a database. While an error keeps repeating, BugsRadar keeps in memory a counter with its latest sample and the id of the message it sent to your chat, to update that message with the count.

Events may contain personal data of your own users - for example, an email address in an exception message or a user ID in a log property. For that data you are the controller, and Bistriy processes it on your behalf (GDPR Art. 28) only to deliver it to the channels you have configured. Please send no more personal data than you need to fix errors. If you need a data processing agreement, write to us.

Delivering an event means sending its content to the service you chose - Telegram, Discord or Pushover - through your own bot, webhook or application. From that point it is processed by that service under its own terms and privacy policy.

4. How we use your information

• Create and secure your account and sign you in by email.
• Provide the Service: your projects and API keys, delivery of events to your channels, and the status of each channel.
• Provide paid plans and keep your plan in line with the payments made through Stripe.
• Check a channel's credentials with its service when you save the channel or press “Check again”, and send a test message when you ask for one.
• Send the emails the Service needs, such as sign-in links.
• Keep the Service secure: detect and stop abuse and diagnose problems.
• Answer your requests to support.
• See how the website bugsradar.com is used: which pages are read, where visitors come from and, if you have accepted analytics cookies, whether a visitor is new or returning.
• Comply with legal obligations and enforce our Terms of Use.

5. Legal bases for processing

Where the GDPR (and, for UK users, the UK GDPR) applies, we rely on the following legal bases:

• Performance of a contract - to provide the Service you signed up for: your account, projects, channels and the delivery of events.
• Legitimate interests - to keep the Service secure, prevent abuse and fix problems, and to count visits to the website without cookies or other identifiers, balanced against your rights.
• Legal obligation - to comply with applicable law, including Polish tax and accounting law.
• Consent - to use the cookies of Google Analytics on bugsradar.com, which tell one visitor from another. You can withdraw your consent at any time with “Cookie settings” at the bottom of any page of the website; see section 13.

For personal data inside the events your applications send, the legal basis is yours as the controller; we act on your instructions, as described in section 3.

6. How we share information

We do not sell your personal data. We share information only as described here:

• Service providers (processors) - companies that host our servers, send our email and deliver your support messages to our team, acting on our instructions and bound by confidentiality and data-protection obligations.
• The services you connect - Telegram, Discord and Pushover receive the content of your events, test messages and credential checks, because you set up a channel with them.
• Stripe - processes the payments for paid plans, refunds and disputes, under its own terms and privacy policy.
• Google - Google Ireland Limited processes the statistics of visits to bugsradar.com for us (Google Analytics): without identifiers, or with the identifiers of its cookies if you have accepted them. We use them for statistics only; the advertising features of Google Analytics are turned off.
• Legal and safety - when required by law, to enforce our Terms, or to protect the rights, safety and security of our users or the public.
• Business transfers - if Bistriy is involved in a merger, acquisition or sale of assets, your information may be transferred, subject to this policy.

7. Data retention

• We keep your account data for as long as your account exists.
• A one-time sign-in link is deleted once it has been used. The key of a browser is deleted from our server when you sign out in that browser.
• A project or a channel you delete is no longer used or shown, and its data is erased within a reasonable period.
• Events are not retained: they are kept in memory only until they are delivered.
• Server logs are kept for a short period for security and diagnostics.
• Website statistics tied to a cookie identifier are kept in Google Analytics for up to 14 months. Totals that identify no one are kept longer.
• When your account is deleted, we delete or anonymize your personal data within a reasonable period, except where we must keep certain records to comply with legal, tax or accounting obligations, to resolve disputes or to prevent abuse. Backup copies are deleted on a rolling schedule.

8. Your rights and how to complain

Under the GDPR you have the right to access, rectify, erase or receive a portable copy of your personal data, and to restrict or object to certain processing. You can see and change your projects and channels in the web app at any time. For any other request, email support@bistriy.com; we respond within the time limits set by law (generally one month).

Where we rely on your consent, you can withdraw it at any time. Withdrawing it does not affect the processing carried out before.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland - uodo.gov.pl. If you live elsewhere in the EEA, you may complain to your local authority.

California residents: we do not sell or “share” personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your privacy rights.

9. Deleting your account

You can delete your projects and channels in the web app at any time. To delete your account, email support@bistriy.com from the address you sign in with. We delete the account together with its projects and channels, subject to the limited retention described in section 7.

10. Security

We use technical and organizational measures designed to protect your information. Traffic to our website, web app and API is encrypted with HTTPS. Channel credentials are stored encrypted with AES-256-GCM, are shown only as a mask after you save them, and never appear in our logs. Sign-in needs no password: each browser signs its requests with its own key.

Keep your API keys secret, and regenerate a key in the web app if it leaks. Keep access to your email secure, since it is used to sign in. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children

BugsRadar is a service for developers and businesses. It is not directed to children, and you must be at least 18 years old to create an account. If you believe a minor has provided us personal data, contact us and we will delete it.

12. International transfers

We aim to process your personal data within the European Economic Area (EEA). Where a service provider processes data outside the EEA, or your information is otherwise transferred internationally, we use appropriate safeguards (such as the European Commission's standard contractual clauses) as required by applicable law. You can request details of these safeguards using the contact details above. Events you deliver to Telegram, Discord or Pushover are transferred to those services at your instruction and handled under their own terms. Google may process the website statistics outside the EEA, including in the United States, under the EU-U.S. Data Privacy Framework or the standard contractual clauses.

13. Cookies and browser storage

Our website bugsradar.com counts visits with Google Analytics: every page loads its script from Google's servers. The website loads nothing else from third-party servers and has no advertising.

The website asks whether Google Analytics may use cookies. Until you accept, and after you reject, it sets no cookies: Google Analytics counts the visit without cookies or other identifiers. If you accept, it sets two cookies:

• _ga - tells one visitor from another; kept for up to two years after your last visit.
• _ga_<ID> - keeps the state of your visit; kept for up to two years after your last visit.

These cookies belong to bugsradar.com alone: your browser does not send them to the web app or to the API. Your answer is kept in your browser's local storage for one year; after that the website asks again. You can change the answer at any time with “Cookie settings” at the bottom of any page. When you reject, the website deletes the cookies of Google Analytics. You can also block or delete cookies, and block the Google Analytics script, in the settings of your browser; the website works without them.

The web app app.bugsradar.com uses no analytics and sets no cookies of its own. When you open the payment window, it loads Stripe's script, and Stripe sets its own cookies to process the payment and prevent fraud. To keep you signed in, it stores a browser identifier and the key that signs your requests in your browser's local storage (localStorage and IndexedDB). They are strictly necessary for signing in and are not used for tracking. The key is removed when you sign out; the identifier stays until you clear the site's data in your browser.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where a change is significant, notify you by email or in the web app. Your continued use of the Service after changes take effect means you accept the updated policy.

15. Contact us

Questions or requests about this policy or your data? Email support@bistriy.com, or write to us at the address in section 1.