Skip to content
Back to home

Privacy Policy

Last updated: October 8, 2026

Overview

BugSnaps Security Ltd. (“BugSnaps”, “we”, “us”) is committed to protecting the privacy of our clients, MyPentest users and website visitors. This policy describes what information we collect, why we collect it, and how we handle it.

Information we collect

  • Contact details you submit through our forms (name, email, company).
  • Engagement-related information you share with us during scoping and testing.
  • MyPentest account details: your email address, display name and sign-in provider.
  • MyPentest assessment data: the domains you verify, how you configure assessments, and their results.
  • Standard request logs kept by our hosting providers (such as IP address and pages requested) for security and reliability.
  • With your permission, Google Analytics collects public-page visits and basic browser, device and approximate location information.

MyPentest

  • Sign-in is provided by Firebase Authentication (Google). Your password, if you use one, is handled by Firebase and never stored by us.
  • Test-account credentials you supply for signed-in testing are used only during that assessment, held in memory by the testing engine, and not included in reports.
  • The testing engine keeps a running or finished assessment for up to 24 hours. Finished reports are saved to your private history in the Firebase Realtime Database, readable only by your account. You can delete any report from your dashboard at any time.
  • We do not sell assessment results or share them with anyone else.

How we use it

We use your information solely to respond to inquiries, provide MyPentest, deliver contracted services, keep our services secure, and improve our website. We do not sell personal data, and we do not share it with third parties except the providers that run our services, or where the law requires it.

Browser storage and cookies

Essential browser storage supports MyPentest sign-in, payment verification after a page reload, and your cookie choice. It remains available when you choose “Essential only.” Google Analytics loads only after you choose “Allow analytics” and uses first-party analytics cookies to help us understand visits to our public pages. We do not use advertising tracking or Google Signals.

Analytics excludes the private MyPentest app, assessment targets, account details, form contents, URL query strings and fragments. Google processes analytics data as our service provider. See Google’s privacy policy. You can withdraw permission at any time through Cookie settings in the footer by choosing “Essential only.” This stops analytics and removes its cookies from this site; it does not remove data already collected by Google.

We no longer store a billing-period preference. Firebase Authentication, Razorpay and PayPal may use their own storage while you sign in or pay.

Client data during engagements

Data accessed during security testing is treated as strictly confidential, handled under the terms of our engagement agreement and NDA, stored encrypted, and securely destroyed after the retention period agreed in your contract.

Contact

Questions about this policy, or want your data deleted? Email aryan@bugsnaps.in.