Privacy

This page explains what data Polyglyph Analytica has from this website, and where it goes.

Last updated 16 October 2026.

Who looks after your data

Polyglyph Analytica Ltd is the controller of the personal data this policy describes. Its details are at the bottom of this page.

The Bugrit plugin

Bugrit runs on your computer and keeps what it makes there. That includes the repositories you let it read, its copy of the code each review looks at, the scanners' output, and the reviews and reports it prepares. The scanners run on your computer. Some fetch their public rules or vulnerability databases, and the site checks load the site you name. None sends your code, your dependency list or a finding anywhere.

Nothing about you or your code is sent to Polyglyph Analytica except the licence check, which carries a licence id and an installation id. Each time Bugrit checks its licence, it also tells our licence server whether your copy has been changed from the one we supplied: yes or no. It never sends what was changed, or any of your files. We keep the latest answer with your licence. If you choose email for a topic of notification, we also get a count of what needs you, and which topics. A paired phone reaches your computer through our relay, encrypted end to end, so the relay carries only what it can't read.

What we hold

When you buy from us, Stripe (Stripe Payments UK Ltd, with Stripe, Inc.) process the payment for us. Stripe uses your name, email address, billing address and card details to take the payment, to work out the tax (from your billing address, and, for price previews in the US and Canada or where your country isn't known, your IP address) and to check for fraud. Stripe's privacy policy covers what it holds.

We use Stripe to send our invoices and take payments, by card or by bank transfer. Stripe keeps your name, email address, billing address and VAT number, and the invoices and payments, for us. For each invoice, we keep only Stripe's reference numbers, whether it is paid, and what it pays for. Your choice about news from us is kept by us, not by Stripe. You can ask Stripe about its own records of your payments.

Stripe may process your data in the United States. That transfer is covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and Stripe is certified under the EU-US, UK Extension and Swiss-US Data Privacy Frameworks.

We keep the Checkout Session id and Stripe customer id Stripe gives us, your email address, and which version of the checkout wording you agreed to and when. We keep that to deliver and look after your licence.

We send marketing email only if you said yes to it, anywhere, for any of our products. Saying yes means you agree to hear from Polyglyph Analytica about any of its products and apps, not only Bugrit. It's one preference across all of them. Every marketing email has a one-click way to say no. Using it, or writing to us, stops marketing email from all of them.

The box to hear from us is ours, on our own page before checkout, and starts unticked. Ticking it means you agree to hear from Polyglyph Analytica about any of its products and apps. You can withdraw at any time from the link in any of our emails, or by writing to us.

Polyglyph Analytica keeps one customer list across all its apps, on our own servers. It holds who our customers are and what each chose about marketing.

This website

This site uses analytics cookies only if you say yes. If you press "Allow analytics" on the cookie notice, Google Analytics records which of our pages you visit. It also records the steps you take towards buying:

• seeing the prices;
• completing a purchase;
• starting a trial or a demo.

This is recorded without your name or email. We use it to learn which pages help. Nothing is used for advertising. If you don't say yes, no analytics runs at all.

Apart from analytics and the currency you choose (below), the site keeps two things in your own browser. One is whether you chose light or dark. The other is your answer to the cookie notice. Neither is sent anywhere. To answer again, use "Cookie settings" at the bottom of every page.

To show prices in your currency, our sites use the country your connection comes from, which our hosting provider, Cloudflare, tells us. We don't store it. On a page that shows prices, you can change the currency at its foot, and your browser remembers your choice.

Our store

You buy at our store. Polyglyph Analytica runs it, as it runs this site.

The store has its own cookie notice. If you press "Allow analytics" there, Google Analytics records which store pages you visit, the links you follow from them, and when you open the checkout. It's recorded without your name or email. We use it to learn which pages help people buy. Nothing is used for advertising. Your answer on this site doesn't carry over to the store. If you don't say yes there, no analytics runs on the store.

When you pay, Stripe tells the store about the payment. The store keeps a copy of what Stripe sends: what you bought, the amounts and the tax, your name, email address and billing address, and any tax number you gave. For a refund, it can also include the card's type, its last four digits and its expiry date. It never includes the full card number. The store uses it to tell Bugrit's licence server about your purchase, and later about a renewal or a refund. It keeps it with our purchase records.

If you ask the store for your price as a returning customer, it keeps your email address and when it last sent you the link, so it sends at most one every 15 minutes. If you open the price link, your browser keeps a cookie on the store's site for 30 days. It lets the store show your price as a returning customer. It's sent only to the store.

If you ask for an invoice, the store keeps what you typed with our sales records, to send the invoice and, once it's paid, what it pays for.

How long we keep it

We keep licence and purchase records for as long as the licence exists, and then for as long as tax law requires. We keep your marketing consent until you withdraw it.

Your rights

Write to hello@polyglyphanalytica.com if you want to:

• ask for a copy of what we hold about you;
• have it corrected or deleted;
• object to its use;
• withdraw a consent.

When you ask us to erase your details and confirm it, we erase them from the records of every Polyglyph Analytica product you've used. We keep an invoice for as long as tax law says we must, and nothing else about you with it.

If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office (ico.org.uk) or your own data protection authority.

Changes

If this policy changes, the date at the top changes with it.

Who you are dealing with

Bugrit is made and sold by Polyglyph Analytica Ltd.
Polyglyph Analytica Ltd, trading as Polyglyph Analytica.
Polyglyph Analytica Ltd. Registered in England and Wales, company number 17495579.
polyglyphanalytica.com
hello@polyglyphanalytica.com

You buy from Polyglyph Analytica Ltd. Stripe processes the payment.