Browser Extension Privacy Disclosure

Last updated: February 27, 2026

This page explains what data the BugZap browser extension collects, when it leaves your browser, and who receives it. This disclosure supplements our main Privacy Policy.

1. What the Extension Does

The BugZap extension helps you capture and report bugs on any web page. It provides:

  • Full-page or region screenshot capture
  • Screen recording (video)
  • Session replay (DOM-based recording of user interactions)
  • Browser console log capture
  • Network error capture

2. Data Collection Details

2.1 Screenshots

When you click the capture button, the extension takes a screenshot of the visible tab. The screenshot is only captured when you initiate it — never automatically.

2.2 Screen Recording

You can optionally record your screen. Recording starts and stops only when you explicitly press the record button. Recordings are stored temporarily in the browser and uploaded only when you submit a bug report.

2.3 Session Replay (DOM Recording)

When you start a recording session, the extension captures DOM mutations and user interactions (clicks, scrolls, mouse movements) using the open-source rrweb library. Important privacy safeguards:

  • All form inputs are masked — passwords, text fields, and other inputs are recorded as masked characters
  • Recording only occurs during an active bug reporting session that you initiate
  • Replay data is buffered locally and only uploaded when you submit the report
  • Replay duration is limited based on your plan (30 seconds to 5 minutes)

Note: Visible text content on the page (headings, paragraphs, labels) may be captured in the replay. If the page displays sensitive information, we recommend stopping the recording before navigating to sensitive screens.

2.4 Console Logs

The extension captures browser console output (log, warn, error, info, debug) during a recording session. This helps developers understand the technical context of a bug. Only the most recent 50 entries are retained, and each entry is truncated at 1,024 characters.

2.5 Network Errors

The extension monitors network requests (fetch and XMLHttpRequest) during a recording session and captures failed requests (HTTP 4xx/5xx, CORS errors, timeouts, network failures). Only error metadata is captured (URL, status code, error type, duration) — request and response bodies are not captured. The most recent 50 errors are retained.

3. When Data Leaves Your Browser

Data is transmitted only when you explicitly submit a bug report. No data is sent in the background, on page load, or during passive browsing. When you submit:

  • Screenshots are uploaded to our secure storage
  • Screen recordings (if any) are uploaded as video files
  • Session replay events (if any) are uploaded as JSON
  • Console logs and network errors are included in the bug report metadata

4. Who Receives Your Data

Bug report data is sent to:

  • BugZap (data processor) — our web application at bugzap.dev
  • Supabase (sub-processor) — database and file storage, EU region available

Your project owner (the person who set up the BugZap project) can view all submitted bug reports. See our full sub-processor list for details.

5. Permissions Explained

The extension requests the following browser permissions:

  • activeTab — to capture screenshots of the current tab
  • tabCapture — to record the current tab (Chrome/Edge only)
  • storage — to save your authentication session locally
  • contextMenus — to add a "Report Bug" option to the right-click menu
  • Host access (all URLs) — required for content scripts that capture console logs, network errors, and session replay on any page you choose to report bugs on

6. Data Retention

Uploaded screenshots, recordings, and replay data are retained for the duration of the project owner's subscription. Upon account deletion, all data is permanently removed within 30 days.

7. Your Rights

Under GDPR, you have the right to access, rectify, erase, and port your data. To exercise these rights, contact contact@bugzap.dev. For full details, see our Privacy Policy and Data Processing Agreement.

8. Contact

For privacy questions about the extension, contact us at contact@bugzap.dev.