What we collect
BundlePulse collects the following data:
- Your email address when you create an account
- The package.json content you submit for analysis
- Analysis results (bundle sizes, dependency trees)
- Authentication data (via Supabase Auth)
- Payment information (processed by Stripe — we never see raw card numbers)
What we do NOT collect
- Your source code
- API keys or environment variables
- Any data beyond what you explicitly submit
How we use your data
- To provide the bundle analysis service
- To send transactional emails (account confirmation, budget alerts)
- To process payments via Stripe
- To improve the accuracy of our alternative recommendations
Data retention
Anonymous analyses (no account) are retained for 30 days. Authenticated analyses are retained indefinitely for Pro users and for 90 days for free users. You can delete your account and all associated data at any time from your settings page.
Third-party services
- Supabase — authentication and database hosting
- Stripe — payment processing
- Vercel — hosting and edge functions
- npm registry / Bundlephobia — package size data (no user data sent)