Cookie Policy

1.About this policy

This Cookie Policy describes how Bug Circuit ("we", "us", "our"), operated by WEB CODE STORE (PVT) LTD, uses cookies and similar technologies such as browser local storage when you visit or use the Bug Circuit service at bugcircuit.com (the "Service"). It explains what these technologies are, which ones we use, why we use them, and how you can control them.

This policy should be read together with our Privacy Policy, which describes how we handle personal data more broadly. If you have questions about this policy, contact us at [email protected].

2.What are cookies and local storage?

A cookie is a small text file that a website asks your browser to store on your device. When you return, your browser sends the cookie back, which lets the site recognise your session and remember certain choices. Local storage is a related browser mechanism that lets a site keep a small amount of information on your device; unlike a cookie, it is not automatically sent with every request to our servers.

We group these technologies into two categories, described below: strictly-necessary cookies that keep the Service working and secure, and a preference value that remembers your display settings. We do not use any other category.

3.Strictly-necessary cookies

These cookies are essential for the Service to function. They enable core features such as signing you in, keeping your session active as you move between pages, and protecting your account and requests against common web attacks. Because you sign in with a one-time code sent to your business email (a passwordless login), the session cookie is what keeps you authenticated after you enter that code.

• Session cookie — a __Host- prefixed cookie that maintains your authenticated login session. The __Host- prefix means the cookie is bound to bugcircuit.com over HTTPS only, is not scoped to a wider domain, and cannot be set from insecure connections, which strengthens its security.
• Security and CSRF protection — a value used to guard against cross-site request forgery, so that actions such as starting a scan or placing an order can only be triggered by you from within the Service and not by a malicious third-party site.
• Login and verification state — short-lived values that support the passwordless one-time-code flow and keep your session consistent and secure.

4.Preference storage

To improve your experience, we remember one display preference: whether you have chosen the light or dark theme. This lets the interface open the way you left it instead of resetting each time you visit.

• Theme preference — records your choice of light or dark mode. It contains only that setting, is used solely to render the interface, and is not used to identify or track you.

You can change or clear this preference at any time by switching the theme in the Service or by clearing your browser storage. Clearing it does not affect your account or your access to the Service; the interface simply reverts to its default appearance.

5.Marketing — the Meta (Facebook) Pixel, only if you accept

When we run advertising campaigns we use the Meta (Facebook) Pixel to measure whether our ads lead to visits and purchases. The Pixel is a marketing technology provided by Meta Platforms that sets cookies and sends event data (such as page views, add-to-cart, and completed purchases, along with your IP address and browser information) to Meta.

How the Pixel loads depends on where you are. If you are in the EU, the EEA, the United Kingdom or Switzerland, it is strictly opt-in: it does not load, set any cookie, or send any data until you press “Accept” on our cookie banner, and our server-side conversion reporting to Meta is likewise only performed after you accept. In other regions, where prior opt-in is not legally required, the Pixel loads by default — but you remain in control and can turn it off at any time using the cookie settings at the top of this page, which also stops the server-side reporting. Wherever you are, declining means the Pixel is never activated.

6.Marketing — Trustpilot reviews, only if you accept

We use Trustpilot to invite customers to leave reviews and to display them. Trustpilot's script sets a cookie to recognise your visit and manage review invitations; it is provided by Trustpilot A/S, which acts as an independent controller for this data under its own privacy policy.

Trustpilot follows the same consent rule as the Meta Pixel above: in the EU, the EEA, the United Kingdom or Switzerland, it does not load or set any cookie until you press "Accept" on our cookie banner. In other regions, where prior opt-in is not legally required, it loads by default — but you remain in control and can turn it off at any time using the cookie settings at the top of this page.

7.Cookies we do NOT use

Apart from the optional, consent-based Meta Pixel and Trustpilot described above, Bug Circuit does not use:

• Any advertising or tracking technology before you have given consent.
• Cross-site tracking cookies for purposes other than measuring our own advertising and managing review invitations, and we do not sell your data to advertising networks.
• Analytics cookies that profile individual users for behavioural targeting.
• Social media embeds that would set third-party tracking cookies without your consent.

Our AI chat assistant answers product questions and does not read customer data, and our payment processing is handled by a third-party payment processor at checkout. Neither places advertising cookies on your device.

8.Consent

The strictly-necessary cookies (sign-in and security) and the single theme preference do not require prior consent, because the Service cannot be provided without the former and the latter is set only when you choose a theme yourself. By using the Service you rely on these to sign in and stay secure.

The Meta Pixel is a marketing cookie, so where the law requires it (the EU, EEA, UK and Switzerland) we ask for your consent first with a banner where you can Accept or Decline, and the Pixel loads only after you Accept. In regions that do not require prior opt-in, it loads by default. Either way you are always in control: use the Allow/Decline buttons in the cookie settings on this page at any time. Declining stops the Pixel and our server-side reporting, and deletes any Meta cookies a previous acceptance set.

9.How to control cookies in your browser

You remain in control of cookies and local storage through your browser settings. Most browsers let you view stored cookies, delete them, and block some or all of them. You can usually find these controls in your browser's privacy or security settings, and browser help pages explain the exact steps for your version.

• View and delete cookies and site data stored for bugcircuit.com.
• Block cookies from specific sites or block third-party cookies globally.
• Clear browser storage on exit or on demand.
• Use private or incognito browsing, which typically discards cookies at the end of the session.

10.Retention and expiry

Session and security cookies are short-lived. They generally expire when your session ends or after a period of inactivity, and they are removed when you sign out or clear your browser storage. The theme preference persists until you change it or clear your browser storage, so that your chosen appearance carries over between visits.

11.Changes to this policy

We may update this Cookie Policy from time to time, for example if we adjust how the Service works or how we use browser storage. When we make material changes, we will update the "last updated" date shown with this policy and, where appropriate, notify you through the Service. We encourage you to review this policy periodically.

12.Contact us

If you have questions about this Cookie Policy or how we use cookies and browser storage, please contact us:

• Privacy enquiries: [email protected]
• General and support: [email protected]
• Legal enquiries: [email protected]
• Security matters: [email protected]

Bug Circuit is operated by WEB CODE STORE (PVT) LTD, a company registered in Sri Lanka, company registration number PV 00318975. This policy is governed by the laws of Sri Lanka.