Legal
Privacy
What the ScaleBun SDK captures, what is masked before anything leaves the device, and the controls available to you. The technical detail here reflects the shipped SDK. The legal sections marked ‘pending review’ are not yet complete and this notice should not be relied on until they are.
What the SDK can capture
Depending on which capabilities you enable: crashes and errors with stack traces, session replay, performance and Core Web Vitals measurements, network requests, console output as breadcrumbs, product analytics events you define, and identity traits you pass to identify(). Nothing is captured for a capability you have not enabled, and an unsampled session installs no replay recorder at all.
Masked before it leaves the device
In session replay, typed form inputs are always masked and password fields are always blanked, regardless of configuration. Beyond that the host application decides: mask all visible text, mask elements matching CSS selectors, or tag any element with data-scalebun-mask to mask its subtree. Strict privacy mode additionally applies heuristic redaction of email addresses, card numbers and government identifiers to captured text. Replay text is otherwise captured so recordings remain readable — that is a deliberate default, and strict mode exists as the safety net for it.
Controls available to the host application
Capture is opt-in per capability and can be disabled at runtime. Replay supports four modes (off, on-error, sampled, always) with a configurable sample rate. Tracking can be made consent-aware, so no data is sent before a user has agreed.
How long data is kept
Two categories have an enforced retention policy, applied by a scheduled purge. Audit logs default to 365 days and can be set between 30 and 3,650 days — 30 is a floor, not a suggestion. Webhook delivery history defaults to 30 days and can be set between 1 and 365.
Telemetry retention — not yet automatic
Product telemetry — sessions, session replay, crashes and events — currently has NO automatic expiry. It is retained until deleted explicitly, which an administrator can do at any time for events or replay data. Automatic retention for these types is planned but not shipped, and it is stated here rather than implied because the honest answer today is "indefinitely, until you ask".
Legal basis, controllers and processors — pending review
The controller/processor split between ScaleBun and its customers, the lawful basis relied on for each processing purpose, sub-processors, hosting regions and international transfer mechanisms are all pending legal review.
Your rights and how to exercise them — pending review
The process for requesting access, correction, export or deletion, the identity checks applied, and the response time will be documented here. In the meantime, contact inquire@scalebun.com and the request will be handled directly.