What we process
When you run the diagnostic, Bubbleio WTF processes the Bubble app URL or app ID you submit and scanner-visible facts from public app assets. Results may include provider names, locations of browser-visible integration evidence, stable fingerprints, and generated blueprint sections.
When you look up an app that we already know, we record which app, which tool you used, and when, against a random visitor cookie (and your account once you sign in), so we can tell whether an app's owner has checked it. We do not store your IP address for this.
Launch updates
If you sign up for migration launch updates, we store your email address, the time you signed up, and the signup source, and email you a link to confirm the address is yours. We only send launch updates to confirmed addresses, and delete unconfirmed signups once their 48-hour link expires. We use a confirmed address to contact you about the migration offering and its launch. An address discovered through a public app scan is not treated as a launch-update signup. To have your signup removed, email hey@rico.wtf.
Credentials and raw values
Blueprint copy is designed not to render raw secret values. Scanner-derived facts should preserve enough evidence to guide remediation without turning public pages into a credential dump.
Read-only access
The public diagnostic is read-only. It does not mutate your Bubble app, access your Bubble editor, or execute workflows inside your app.
Brand artwork credits
The pinched-fingers artwork is adapted from Twemoji, © Twitter, Inc. and other contributors, licensed under CC BY 4.0. We scaled, rotated, and combined it with the Bubble mark. Bubble is a trademark of Bubble Group, Inc. This site is independent and is not affiliated with or endorsed by Bubble. Artwork sources and adaptation details.
Contact
Privacy questions or removal requests: hey@rico.wtf.