Bug Report – Privacy Policy

For the Bug Report Chrome extension · Effective 30 October 2026

Bug Report is a Chrome extension made by Skywalk Innovations ("we", "us"). It lets people report problems on websites we build or support. A report can include a screenshot, a screen recording and technical details about the page. This policy explains what the extension collects, why, where it goes and what you can do about it.

1. Summary

• The extension only sends data when you sign in and when you choose to send a report.
• Reports go to Skywalk Innovations' own servers on Amazon Web Services (AWS) and to the issue tracker (Jira) our team works in. Only our team and the people who look after your project can see them.
• We do not sell your data. We do not use it for advertising. We do not track your browsing. The extension contains no analytics or third-party trackers.

2. Information we collect

2.1 Your account

You need an account to send reports. When you register or sign in (through Amazon Cognito), we receive your email address, your name if you give it, and an account ID. Your password is handled by Amazon Cognito; we never see it. We use your email to check which projects you may report on and to show who sent a report.

2.2 What you put in a report

• The text you type: the title, description, severity, steps to reproduce and any other fields in the form.
• A screenshot of the visible part of the tab you are reporting on, with any marks you add. You can blur parts of it before sending.
• An optional screen recording of that tab (up to 5 minutes), which you start and stop yourself. It includes the tab's sound. It includes your voice only if you choose Include my voice and allow microphone access.

2.3 Technical details added to a report

So that developers can find the problem, a report also includes:

• The page address and title, your browser and operating system, the window size and the time. Passwords and token-like values in the address are removed.
• Up to the last 50 console errors and the last 50 failed network requests on the page. For each request we keep only the method, the address, the status and how long it took. We never keep request or response contents, headers or cookies.

2.4 The action timeline (recordings only)

While you record a tab, the extension notes what happened on it, timed against the video:

• Buttons and links you clicked, named by their visible label.
• Form fields you filled in, named by their label only. What you typed is never kept.
• Options you chose, forms you sent and page changes.
• Every network request (method, address without its query string, status and timing) and console errors and warnings.

Website owners can mark parts of a page as private. Clicks and fields there are recorded only as "private". Nothing is noted on tabs that are not being recorded.

2.5 Server responses (only if you allow it)

Some projects ask for more detail about failed requests. In that case the extension asks you on every report, "Also include server responses for failed requests?" Only if you choose Allow, the report also includes, for failed requests only, the first 10 KB of the request and response contents and the response headers. Before anything leaves your device, the extension removes cookies, authorisation headers and other secret-looking headers, and replaces fields that look like passwords, tokens, keys or card details with [hidden]. If you choose Don't allow, these details are deleted on your device and never uploaded.

3. What the extension does on the pages you visit

The extension needs access to all websites so that it can show the report button and take a screenshot or recording on whichever site you are reporting on. On each page it keeps a short list of recent console errors and failed requests in memory only. This list is never saved and never sent anywhere unless you send a report from that page. It disappears when you leave the page. The extension does not read, collect or send your browsing history, and it does not read page content other than as described in this policy.

4. How we use the information

We use the information only to:

• sign you in and check which projects you may report on;
• deliver your report to the team that looks after the website, and create a ticket for it in their issue tracker;
• investigate and fix the problem you reported, and reply to you about it.

We do not use it for any other purpose. In particular, we do not use it to build profiles, for advertising, for credit or lending decisions, or to train AI models.

5. Where the information is stored and who receives it

• On your device. Sign-in tokens stay in the extension's session storage and are cleared when Chrome closes. Drafts, screenshots and recordings stay in the extension's local storage until they are sent. Unsent media older than a week is deleted automatically.
• Our servers on AWS. Accounts (Amazon Cognito), reports (Amazon DynamoDB) and screenshots, recordings and timelines (private Amazon S3 storage) are kept in AWS's Ireland region (eu-west-1). Data is encrypted in transit (HTTPS). Media can only be opened through links that expire within 30 minutes.
• Issue tracker. Each report is copied, with its attachments, into a ticket in the project's issue tracker (Atlassian Jira). Atlassian's own privacy policy applies to data kept there.
• People. Skywalk Innovations staff who look after your project, and anyone your organisation has given access to the tracker project, can see your reports.

We do not sell, rent or trade your information. We share it with no one else, except where the law requires us to.

6. Chrome Web Store Limited Use

The use of information received from Chrome APIs by this extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We only use this data to provide and improve the extension's single purpose: reporting bugs on websites. We do not transfer it to others except as described above, and we do not allow humans to read it except to fix the problem you reported, for security, or where the law requires it.

7. How long we keep it

We keep reports and their attachments for as long as we look after the website they relate to, so that problems can be followed up and checked once fixed. We keep your account until you ask us to delete it. Tickets in an issue tracker are kept under that project's own settings. You can ask us to delete your account or your reports earlier at any time (see section 8).

8. Your choices and rights

• You decide whether to send a report, what it contains, whether to add a recording, whether to include your voice and whether to include server responses. Unsent drafts can be discarded at any time.
• You can sign out from the extension's toolbar menu, and remove the extension from Chrome at any time. Removing it deletes everything it kept on your device.
• Depending on where you live (for example under South Africa's Protection of Personal Information Act or the EU General Data Protection Regulation), you may have the right to see the information we hold about you, have it corrected or deleted, or object to how we use it. Email us at the address below and we will respond within 30 days.

9. Children

The extension is a work tool for businesses. It is not meant for children under 13, and we do not knowingly collect their information.

10. Changes to this policy

If we change how the extension handles data, we will update this page and the date at the top before the change takes effect. If the change is significant, we will ask for your consent where the law requires it.

11. Contact

Skywalk Innovations
Email: dev@skywalkinnovations.co.za