Privacy Policy
Effective date: 2 September 2026 · Last updated: 2 September 2026
This Privacy Policy (the “Policy”) explains how DebugToad LLC, a New York limited liability company (“DebugToad,” “we,” “us” or “our”), collects, uses, discloses and protects personal information in connection with our mobile applications (the “Apps”), our website at debugtoad.com (the “Site”) and our support services (together, the “Services”). It also describes the rights available to you and how to exercise them.
In short. The Apps have no user accounts, no analytics software development kits, no advertising and no tracking. What you enter into an App stays on your Device and is not transmitted to us. We never sell or share personal information, and we do not use it for cross-context behavioural advertising. The limited personal information we do process is described in Sections 6 to 8 — principally the email you send us if you contact support.
1. Scope of this Policy
1.1 This Policy applies to personal information processed by DebugToad through the Services. It forms part of, and is incorporated by reference into, our Terms of Use.
1.2 This Policy does not apply to the practices of Apple Inc., Google LLC, or any other third party whose services you use to obtain or run an App. Those parties process personal information as independent controllers under their own privacy policies, which we encourage you to read.
1.3 In this Policy, “personal information” means information that identifies, relates to, describes or is reasonably capable of being associated with an identified or identifiable natural person, and has the same meaning as “personal data” under the EU and UK General Data Protection Regulation (“GDPR”).
2. Who is responsible for your information
The controller of personal information processed under this Policy is:
DebugToad LLCA limited liability company organised under the laws of the State of New York, United States
Email: contact@debugtoad.com
Given the limited, occasional and low-risk nature of the processing described in this Policy, we have not appointed a representative in the European Union or the United Kingdom under Article 27 GDPR, in reliance on the derogation in Article 27(2)(a). You may contact us directly at the address above on any matter concerning your personal information.
3. Information we do not collect
3.1 The Apps do not require you to create an account, register, or provide your name, email address, telephone number or postal address.
3.2 The Apps contain no third-party analytics, attribution, advertising or tracking software development kits. We do not build advertising profiles, we do not use cookies or similar technologies in the Apps for advertising, and we do not track you across applications or websites owned by other companies.
3.3 We do not knowingly collect precise geolocation data, contacts, photographs, health records, biometric identifiers or any other special category of personal data within the meaning of Article 9 GDPR.
3.4 We do not sell personal information, and we do not share personal information for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CCPA”) and comparable state laws. We have not sold or shared personal information in the preceding twelve (12) months, including the personal information of any consumer under sixteen (16) years of age.
4. Information stored on your Device
4.1 Settings, presets, timers, history and other content you create in an App are stored locally on your Device using the storage facilities provided by its operating system. This information is not transmitted to DebugToad and is not accessible to us.
4.2 Locally stored information may be included in a Device backup made by you or by your operating system provider (for example iCloud Backup or Google One backup), in which case it is handled under that provider’s privacy policy and not this one.
4.3 You can erase locally stored information at any time using any reset function offered within the App or by uninstalling the App from your Device. Uninstalling is permanent and we cannot recover the data for you.
5. Categories of personal information
The following table summarises the categories of personal information we process, the sources from which we obtain them, our purposes, and the categories of recipients. It is provided in the form required by the CCPA and is accurate for the twelve (12) months preceding the “Last updated” date above.
| Category | Examples | Source | Purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Email address and any name you include when you write to us; IP address in Site server logs | You; our hosting provider | Responding to support requests; security and integrity of the Site | Email and hosting providers acting as our service providers |
| Customer records | The content of your correspondence with us | You | Responding to and following up on your enquiry; keeping a record of the issue | Email provider acting as our service provider |
| Commercial information | Aggregated sales, download and refund reports by territory | Apple and Google | Financial reporting and understanding demand; the reports do not identify individual purchasers | Our accountants and tax authorities as required by law |
| Internet or network activity | Diagnostic and crash reports; pages requested from the Site and user-agent string | Apple and Google, only where you have opted in on your Device; our hosting provider | Diagnosing defects and improving stability; operating and securing the Site | Hosting provider acting as our service provider |
We do not process the following categories: precise geolocation; biometric information; sensitive personal information as defined by the CCPA; education information; or inferences drawn to create a profile.
6. Information we receive from app stores
6.1 Purchases. Purchases of the Apps are processed entirely by Apple or Google. We do not receive or store your payment card details, billing address or store account credentials. We receive aggregated financial and download reports that identify territories and volumes, not individual customers.
6.2 Diagnostics and crash reports. If you have enabled the diagnostics-sharing setting on your Device — for example “Share With App Developers’ on iOS or “usage and diagnostics” on Android — Apple or Google may make crash logs and performance data available to us. These reports are provided by the platform in aggregated or pseudonymised form and are used solely to diagnose and fix defects. You can disable this sharing at any time in your Device settings.
6.3 Reviews and store communications. If you leave a public review or contact us through an app store, the store operator determines what information is disclosed to us. We use it only to understand and respond to your feedback.
7. Information you provide to us
7.1 If you write to contact@debugtoad.com, we receive your email address, the content of your message and any information you choose to include, such as your Device model, operating system version or screenshots.
7.2 We use that information solely to respond to you, to reproduce and resolve the issue you report, and to keep a record of the matter. We do not add you to a marketing list, and we do not use your address for any purpose other than the one for which you contacted us.
7.3 Please do not send us information you would prefer to keep private, and in particular do not send health information, government identifiers or payment details. Ordinary email is not a secure medium.
8. Information collected when you visit the Site
8.1 The Site is a static website. It sets no cookies of its own, runs no analytics, and does not embed advertising or social-media tracking.
8.2 The Site is hosted on GitHub Pages, a service of GitHub, Inc. Like any web server, that service records technical information about requests, including IP address, date and time, the resource requested and the browser user-agent string. GitHub processes those records as our service provider for the purpose of delivering and securing the Site, in accordance with its own privacy statement. We do not use these records to identify individual visitors.
8.3 Email sent to our contact address is delivered through an email routing and hosting provider acting on our behalf, which processes the message in transit and at rest for the purpose of delivering it to us.
9. How we use personal information
We use personal information only for the following purposes:
- to provide, operate and maintain the Services;
- to respond to your enquiries, support requests and feedback, and to follow up on reported issues;
- to diagnose defects, fix bugs and improve the stability and quality of the Apps;
- to operate, secure and monitor the availability of the Site and to prevent abuse;
- to comply with our legal, accounting and tax obligations; and
- to establish, exercise or defend legal claims.
We do not use personal information for automated decision-making that produces legal or similarly significant effects concerning you, and we do not carry out profiling.
10. Legal bases for processing
Where the GDPR or the UK GDPR applies, we rely on the following legal bases under Article 6(1):
- Performance of a contract (Article 6(1)(b)) — to provide the Apps under our Terms of Use and to handle support requests relating to them;
- Legitimate interests (Article 6(1)(f)) — to secure and maintain the Site, to diagnose defects, and to protect our legal rights, where those interests are not overridden by your interests or fundamental rights;
- Legal obligation (Article 6(1)(c)) — to meet accounting, tax and record-keeping requirements; and
- Consent (Article 6(1)(a)) — where you have opted in to share diagnostic data at the operating-system level. You may withdraw that consent at any time in your Device settings, without affecting the lawfulness of processing carried out before withdrawal.
11. How we disclose personal information
11.1 We do not sell personal information, and we do not disclose it for consideration or for advertising purposes.
11.2 We disclose personal information only:
- to service providers who process it on our documented instructions and under written contract — currently our website hosting provider, our email routing and mailbox provider, and our accounting advisers;
- to app store operators, to the extent necessary to administer a purchase, refund or store listing on your behalf;
- where required by law, including in response to a subpoena, court order or other lawful request by a public authority, and where we consider disclosure necessary to protect the rights, property or safety of DebugToad, our users or the public; and
- in a corporate transaction, such as a merger, acquisition, financing or sale of assets, in which case we will require the recipient to honour this Policy or give you notice and a choice before your information becomes subject to a materially different policy.
12. International transfers
12.1 We are established in the United States, and personal information we process is stored and handled there. If you use the Services from outside the United States, your information will be transferred to and processed in the United States, whose data protection laws may differ from those of your jurisdiction.
12.2 Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards under Chapter V GDPR, including the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) in our contracts with service providers. A copy of the relevant safeguards is available on request.
13. Retention
13.1 We keep personal information only for as long as necessary for the purpose for which it was collected, and then delete it or render it anonymous.
13.2 As a general rule: support correspondence is retained for twenty-four (24) months after the matter is closed, so that we can recognise recurring issues; Site server logs are retained by our hosting provider for the short period set out in its own policy; and financial records are retained for seven (7) years as required by applicable tax law. We may retain information for longer where necessary to establish, exercise or defend legal claims.
14. Security
We maintain technical and organisational measures appropriate to the limited nature of the information we hold, including transport encryption for the Site and our email, access limited to personnel who need it, multi-factor authentication on the accounts we use, and a practice of collecting as little information as possible. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the competent authorities where required by applicable law.
15. Your privacy rights
15.1 European Economic Area, United Kingdom and Switzerland
Subject to the conditions and exceptions in applicable law, you have the right to request access to your personal information; to have inaccurate information rectified; to have information erased; to restrict or object to processing, including processing based on legitimate interests; to receive your information in a portable format; and to withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority (in the United Kingdom, the Information Commissioner’s Office). We would appreciate the opportunity to address your concern before you do so.
15.2 California
Subject to verification and to the exceptions in the CCPA, California residents have the right to know the categories and specific pieces of personal information we have collected, the sources, the business purposes and the categories of recipients; to delete personal information; to correct inaccurate personal information; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. As stated in Sections 3.4 and 11.1, we do not sell or share personal information and do not process sensitive personal information, so the latter two rights have no application to us. We will not discriminate against you for exercising any right, and we offer no financial incentives for personal information. Under California Civil Code § 1798.83, California residents may also request information about disclosures to third parties for their direct marketing purposes; we make no such disclosures.
15.3 Other United States jurisdictions
Residents of states with comprehensive privacy legislation — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana — have comparable rights of access, correction, deletion, portability and opt-out, together with a right to appeal a refusal of a request. To appeal, reply to our decision with the word “Appeal” in the subject line; we will respond within the period required by your state’s law and, if we again decline, will tell you how to contact your state attorney general.
15.4 How to exercise your rights
Send your request to contact@debugtoad.com, describing the right you wish to exercise. We will acknowledge within ten (10) business days and respond substantively within forty-five (45) days, or within one (1) month where the GDPR applies, and may extend that period once where permitted by law, in which case we will tell you why. Because the Apps hold no account and store your content only on your Device, we are usually able to act only on the correspondence and records described in Sections 6 to 8; where we cannot identify you in our records, we will say so. You may use an authorised agent where applicable law permits, in which case we may ask for proof of authority and for verification directly from you.
16. Children’s privacy
16.1 The Services are general-audience products. They are not directed to children under thirteen (13), and we do not knowingly collect personal information from children under thirteen (13) within the meaning of the Children’s Online Privacy Protection Act, or from children under sixteen (16) where the GDPR applies.
16.2 If you believe a child has provided us with personal information, please contact us at contact@debugtoad.com and we will delete it promptly.
17. Do Not Track and Global Privacy Control
The Site performs no tracking, so there is nothing for a Do Not Track or Global Privacy Control signal to disable. We nevertheless honour opt-out preference signals to the extent required by applicable law, and we do not sell or share personal information in any event.
18. Third-party links and services
The Site and the Apps may link to websites and services operated by others, including app stores and support resources. We do not control those services and are not responsible for their privacy practices. This Policy applies only to information processed by DebugToad.
19. Changes to this Policy
We may update this Policy to reflect changes in our practices or in applicable law. The current version will always be posted at this address with a revised “Last updated” date. Where a change materially affects how we handle personal information already collected, we will give notice through the Site or the Apps and, where required by law, obtain your consent before the change takes effect.
20. How to contact us
For any question about this Policy or about how we handle personal information, please write to:
DebugToad LLCA limited liability company organised under the laws of the State of New York, United States
Email: contact@debugtoad.com