Privacy Policy

LaraBug (operated by a Belgian company, referred to as “we”, “us” or “our”) is committed to safeguarding the personal data of its users. This Privacy Policy outlines how we collect, process, and protect personal data in line with the General Data Protection Regulation (GDPR – EU 2016/679) and the Belgian Data Protection Act.

1. Controller

The data controller for the processing described herein is:

LaraBug
Nazarethsesteenweg 13
9800 Deinze
Belgium
VAT BE0740.911.734

Email: support@larabug.com
Website: https://www.larabug.com

2. Hosting & Data Location

All servers and analytics used by LaraBug are hosted in Germany via Hetzner Online GmbH. Your data is processed and stored exclusively within the European Economic Area (EEA).

3. What We Collect

We collect the following types of data:

Account information (e.g. name, email address, password hash)
Project and integration metadata
Technical exception data submitted via LaraBug SDKs
Access logs and device/browser metadata
Optional contact form messages

Note: Any sensitive data (e.g. personal identifiers in exceptions) is automatically anonymized by our open-source Laravel package before being stored.

4. Purpose of Processing

We process your data to:

Provide access to and operate our service
Authenticate users and manage teams/projects
Send error notifications and maintain logs
Improve platform performance and detect abuse
Comply with legal and tax obligations

5. Legal Grounds

The legal bases for our processing are:

Art. 6(1)(b) GDPR – Contractual necessity
Art. 6(1)(f) GDPR – Legitimate interests (e.g. platform security, support)
Art. 6(1)(c) GDPR – Legal obligations
Art. 6(1)(a) GDPR – Consent (where required, e.g. optional cookies)

6. Cookies

We use essential cookies for login sessions and security. Non-essential cookies (e.g. analytics) are not used unless you give explicit consent. You can control cookies through your browser settings.

7. Analytics

We run a self-hosted analytics system on our own Hetzner infrastructure. No data is sent to third parties such as Google Analytics. Data is anonymized where possible and used only to improve user experience and service stability.

8. Retention

Personal data is retained as long as necessary to provide our services and fulfill legal obligations. Inactive user accounts and associated data are removed after 12 months of inactivity, unless legally required otherwise.

9. Your Rights

You have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Withdraw consent at any time
Receive a copy of your data (data portability)
Lodge a complaint with the Data Protection Authority (GBA in Belgium)

10. Subprocessors

We may use subprocessors (e.g. Hetzner for hosting, email providers) solely for delivering the LaraBug service. All subprocessors are GDPR-compliant and located within the EEA. A full list is available upon request.

11. Security

We use TLS encryption, server-side firewalls, strict access controls, backups and logging to safeguard your data. Despite best efforts, no digital transmission is 100% secure.

12. Changes

We may update this policy from time to time. The latest version will always be available on our website. Significant changes will be announced via email or platform notices.

13. Contact

Questions or concerns? Contact us at:

Email: support@larabug.com