BundleShield Privacy Policy
Last updated: 26 September 2026
This page explains what BundleShield collects, why, and what happens to it. Questions or deletion requests: hello@bundleshield.com.
What we collect
- Your email address, when you start a check from your purchase. It is used to send your report and order updates.
- The bundle you upload: one ZIP of up to 50 SVG or PNG designs plus the license text file inside, up to 95 MB. It is used only to run your check.
- Purchase records, held by Gumroad as merchant of record: what you bought, when, and the amount. We do not see or store your card details.
- Aggregate daily site counts: visits and funnel-step usage, recorded as daily totals.
What happens to your upload
Your upload sits in a private per-order quarantine while we run the checks. Working copies are made to prepare your report. Before a completed report is emailed to you, we remove the uploaded files and working copies from active case storage and verify they are absent. Uploads that are rejected, and uploads whose processing fails, have their copies removed the same way.
If a check cannot be completed, or a case stalls partway, email hello@bundleshield.com about deletion. We do not yet have an automatic retention deadline for incomplete cases, so we would rather tell you that plainly than print one.
After the files themselves are removed, we keep limited records: the sale and check issuance record, a hash of your report, the deletion receipt, and any incident record. These records do not include your designs.
The email address you give at claim is used for your report and order updates. No marketing, unless you separately ask for it. There is no marketing list today: no newsletter, no promotional sequence, nothing to unsubscribe from. If that ever changes, it will be a separate ask with its own consent, and this page will say so first.
We do not sell your email address. It is handled only by the processors listed below, for the purposes listed.
Who processes your data
- Gumroad: merchant of record and payment processor. Their privacy policy applies to checkout.
- Alibaba Mail (hosted): delivers your report and order emails from hello@bundleshield.com.
- Cloudflare: hosts the site and stores check data while your order is active.
We do not share your files or personal data with anyone else, except if the law requires it.
Analytics
Our own site-visit counter does not use cookies or identify individual visitors. It records daily totals, not a visitor history. A paid check separately needs your purchase email and sale details so we can verify your purchase, run the check and deliver your report. We do not run advertising trackers.
Retention and deletion
Uploaded files and working copies are removed as described above. The limited records we keep (sale and issuance, report hash, deletion receipt, incident records) persist after the files are gone, for accounting and support. Email hello@bundleshield.com to ask what we hold on you or to request deletion, and we will confirm what was done.
Changes
If this policy changes, the date at the top changes. Material changes are flagged on the page before they take effect.