Privacy policy

The first time you open Breakpatch it tells you it counts, and you can press Turn off. Nothing is sent before you've seen that message.

After that, on each day you use it, the app sends one short message with: how many tests were created and how many were run, passed and failed since the last message; whether this is the first message today, this week, this month and ever (so we can count how many Macs use Breakpatch without knowing which ones); and the app version.

It never sends test names, website addresses, steps, screenshots, saved passwords, your name, your email, or anything that identifies you or your Mac. We add the numbers into totals for everyone and don't keep the message itself.

Your internet address is only used for a moment, to stop one address from sending too many messages. It's never stored. When you turn counting off, nothing is counted or sent, and anything waiting is dropped. Advanced users can also turn it off with BREAKPATCH_NO_USAGE=1. The code is open source, so anyone can check this.

We also see how many times each download was fetched, as counted by GitHub. The install command itself sends nothing.

The licence service at account.breakpatch.dev runs on Google Cloud in Europe. It keeps:

• Your company's licence: the company name, the licence admins' emails, the plan, seats and machines bought and in use, dates and status. The licence key itself is never stored in readable form.
• Each seat: the email of the person using it, or a runner or CI machine's name; a scrambled code for the Mac it's used on, which can't be turned back into anything about the Mac; the ID of your company's workspace; the app version; and when the seat was taken, last used and freed. A seat nobody uses for 30 days is freed.
• Simple totals with each check, about once a day: how many tests were created, how many runs there were and how many passed or failed, and on how many days Breakpatch was used. Only numbers. Your licence admins and Breakpatch can see them. They're part of how the licence works, so Team has no switch for them.
• A log of licence changes: seats taken and freed, admin changes and payments, with who made them.
• Back office sign-in: you sign in with a link sent to your email. Google's Firebase sends the email and keeps your email address and when you signed in.

To stop abuse, the service briefly counts requests per internet address and per key tried. It never stores the address in readable form, and the counters are deleted within a day or two. Google keeps standard request logs, which include internet addresses, for a limited time. Our own logs never contain licence keys.

Once it's offered, Hosted by Breakpatch keeps a Team or Business workspace for you on Google Cloud in Europe. Your tests are encrypted on your Macs with a key that's made there and that we never have, so we store them but can't read them. We see only what the workspace needs to work: who is in the team, ids, dates, pass or fail and counts. If you host your workspace yourself, in your own Firebase project, we hold none of it.

Paddle.com sells Breakpatch on our behalf (it's the Merchant of Record). When you buy, Paddle collects your name, email, billing address, payment details and any tax number, under Paddle's own privacy policy. We never see card details.

Paddle tells us your name and email, the company name you enter, what you bought (plan, seats, machines, billing period), whether it's paid, and Paddle's reference numbers. We keep those with your licence, and make that email the licence's first admin so you can sign in and get your key.

Nothing is on sale yet. Once a plan is, Paddle's checkout only loads when you press Buy on the pricing page.

When the Solo plan is offered: before its checkout opens, the pricing page sends our licence service only the domain of the email you typed (for example initech.com, never the whole address), to check whether Solo can be bought for your company: Solo is one per company, and not for companies that already use Breakpatch Team or Business. Subdomains count as their company (eng.initech.com is initech.com). The answer is only whether that company already has Solo, or Team or Business (without saying which of the two, or who), and anyone can ask it for any company domain, since the pricing page is public. Personal email domains, such as gmail.com, aren't looked up, so nobody can learn whether a personal address has a licence.

breakpatch.dev is hosted by Google's Firebase. It sets no cookies and runs no analytics. Its fonts come from Google Fonts, so your browser asks Google's servers for them.

The home, pricing and docs pages ask our licence service whether the Solo plan is on sale, and the home page also asks how many tests have been run with Breakpatch. The answers are the same for everyone, and nothing about you is sent with the questions. Your browser keeps the Solo answer (one setting in its local storage), so the next page shows right away.

• Google (Firebase, Google Cloud): the website, the licence service and back office sign-in.
• Paddle: checkout, payments, invoices, tax and refunds.
• GitHub: app downloads and their counts, and issues you open there.

Licence records, seats, usage totals and the change log are kept while the licence exists, and afterwards: billing and payment records for 6 years, as tax law requires, and seats and usage totals for 12 months. The free version's totals contain nothing personal and are kept.

You can ask for a copy of what we hold about you, ask us to correct it or delete it, or object to how we use it, by emailing support@breakpatch.dev. You can also ask to receive your data in a format you can take elsewhere, or ask us to limit how we use it. We answer within one month.

We use this data to provide the licence you or your company bought (a contract), and to keep the service safe and understand how it's used (our legitimate interests). If you're unhappy with how we handle your data, you can complain to the UK's Information Commissioner's Office at ico.org.uk. We'd rather you told us first, so we can put it right.