Privacy Policy
Last updated: April 2026
🔒 Short version: BashBundle collects no personal information, requires no account, and stores all your data locally on your device. We never sell, share, or transmit anything that identifies you.
What we collect
BashBundle collects no personally identifiable information. Specifically:
- No name, email address, phone number, or any other contact information
- No account creation is required or offered
- No payment information is collected (BashBundle is free)
- No location data beyond the US state you optionally enter for alcohol availability
- No browsing history or search queries
Local storage
BashBundle stores the following data locally on your device using your browser's localStorage API:
- Your selected guest count preference
- Your US state preference (only if you've entered one for alcohol filtering)
- Your Kroger OAuth access token (if you've connected Kroger), which expires automatically
This data never leaves your device. Clearing your browser data or cookies removes it completely.
Anonymous analytics
BashBundle sends anonymous, aggregate usage telemetry to a Google Apps Script endpoint for product improvement. This data:
- Contains no personal identifiers — no IP address, device ID, user ID, or fingerprint
- Records only which party themes are selected, cart push rates, dietary filter usage, and which ingredients weren't found in Kroger's catalog (to improve our search mappings)
- Is fire-and-forget — failure to send never affects your experience
- Is stored in a private Google Sheet that is never shared
Third-party services
When you push your cart to Instacart, Kroger, or Amazon, you interact directly with those platforms' services. BashBundle transmits only the ingredient or product names you've selected — no account information, no personal data. Those platforms' own privacy policies govern their data handling:
Affiliate links
BashBundle participates in affiliate programs with Amazon, Instacart, and Kroger. Affiliate links from BashBundle include tracking parameters in the URL that identify BashBundle as the referrer for commission purposes. These parameters do not transmit your personal data, browsing history, or device information to these platforms — they only identify BashBundle to the destination platform for commission tracking.
You can identify affiliate links by the presence of tag=bashbundle-20 (Amazon) in the URL. No personal information is shared with these platforms by BashBundle as part of the affiliate relationship.
Cookies
BashBundle does not use cookies. We use the browser's localStorage API, which you can clear at any time through your browser settings.
Children's privacy
BashBundle is intended for adults planning social gatherings. We do not knowingly collect data from children under 13. If you believe a child has used our service, contact us and we will ensure any stored data is removed.
Changes to this policy
If we ever change our privacy practices, we'll update this page. The "last updated" date at the top reflects the most recent revision. Continued use of BashBundle after changes constitutes acceptance of the updated policy.
Contact
Questions? Email us at [email protected].