Your data stays here

Your browser sessions

The extension uses Humble Bundle and the Steam store. Epic’s store and account sites, GOG’s store, account, catalog and ownership services, and the Battle.net account site are optional. Access is requested when you connect or check that provider and allow Chrome’s request.

It uses no analytics or advertising trackers and has no backend for your keys or account records. It does not store passwords or session cookies. Session and security tokens are used transiently in service tabs to perform the requested checks and redemptions.

Requests go directly to the relevant services. They receive the information needed for the action, including a selected code when you preview or redeem it. Their own privacy policies and terms apply.

What is saved locally

Keys, product names, purchase identifiers, account IDs and names, account/store country, match choices, gift recipient notes, settings, and scan and redemption progress are saved using AES-256-GCM authenticated encryption in this extension’s local browser storage. A random key is kept as a non-exportable Web Crypto key in this extension’s IndexedDB storage in the same Chrome profile. It is not uploaded or synced. Unlocking is automatic; no passphrase is required.

Automatic unlocking allows scheduled batches to resume. Encryption protects the saved records from being stored as readable text; it does not protect against someone or software that controls your Chrome profile or unlocked computer. The extension can read decrypted records while it runs. Keep the same profile when updating: copying encrypted records without their key will not recover them.

On upgrade, older saved records are encrypted and read back for verification before the old active plaintext record is removed. If encryption or verification fails, the extension stops and keeps the existing records. Older exported files and external backups are not changed. Versions before 1.9.2 stored records without encryption; update the extension to migrate them.

Export keys & results creates an unencrypted CSV containing keys; keep it private. Clear local data removes saved keys and history and replaces the encryption key. Only cooldown timing and attempt counts are retained to respect service limits. Removing the extension also removes that local storage. These actions cannot erase a file you already downloaded or undo a platform redemption.

Clear scan cache only removes reusable scan data. It keeps saved keys and activation history. Disconnecting a provider stops its use by BundleBridge; it does not sign you out of that service.

You choose what happens

It makes no purchases or subscription changes. Gift sharing prepares text or an email draft for you to send; it does not create a Humble gift link or send messages. Copying a gift message puts its code on your clipboard; opening an email draft passes that text to your mail application.

Activation starts only when you authorize a selected queue, then continues that queue until it finishes or is paused. Steam batches can resume after their saved cooldown. A request already sent may complete after pausing. New purchases are not automatically added to an authorized queue.

Optional shared game catalog

If you choose Download & enable matches, the extension requests a public catalog from elevatedsolutionsit.com. It downloads the same catalog for everyone and matches titles locally. It does not send your library, account IDs, keys or gift notes. No cookies or credentials are included in the download.

The web server necessarily receives your IP address and normal request information, which the host may retain in access or security logs. Downloads happen only when you click to enable or update the catalog. Disable & clear catalog removes its local cache and optional site access; matches already applied to your queue remain until you edit them.

The catalog contains reviewed game names, editions, providers and public store links. If you email a suggested correction, share only those public details. Suggestions are reviewed before publication.

Optional support reports

The Support & debugging page builds a local report from selected status fields. It excludes keys, account IDs, private URLs, cookies, gift notes and raw service responses. Game names are excluded unless you enable them. You can preview the complete report before downloading it. Nothing is uploaded or emailed automatically.

If you choose to email a report, its contents are received by the support address and email services involved. Never include a password or product key.

Limited Use

BundleBridge’s use and transfer of user data comply with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only to provide or improve the disclosed game-management and redemption features. We do not sell user data or use it for advertising, unrelated profiling, creditworthiness or lending. Necessary requests go directly to the game services you choose. Keys and account records are not uploaded to our servers. Human access to data you share is limited to your explicit consent for support, security purposes or legal requirements.

We access only the supported service pages and product links needed for the selected features, not unrelated browsing history. Locally saved action status and timestamps let scans and approved queues resume; they are not analytics.

Contact & independence

For privacy questions, email mark@elevatedsolutionsit.com. Opening the website or the optional Buy Me a Coffee link is a separate visit subject to that site’s privacy practices.

BundleBridge is an independent tool and is not endorsed by Humble Bundle, Valve, Epic Games, GOG, Blizzard, Ubisoft or the other game services. Provider names identify the services they belong to.