Bug report for sniff-target.pages.dev

Worth a second look

We saw these once but could not confirm them with enough evidence to call them bugs. They may be nothing.

• Password reset email did not arrive (Forgot password)

Tested and passed

Not covered in this run

• Habits and streaks: The homepage advertises 'New: habit streaks are here', but we couldn't find any habits page or controls in the app
• Reminders and notification settings: No reminder or notification controls could be found in the dashboard or Settings
• Deleting a task: Our test browser stopped responding after clicking Delete, so we couldn't confirm the result (most likely a confirmation pop-up our tools can't handle)
• Password reset completion: The reset email didn't arrive in time, so the reset link and new-password step were not tested
• Due dates and timezones end to end: Creating tasks with due dates in different timezones and checking the counters was not completed
• Edge-case input in forms (very long text, emoji, spaces only): Not reached in the time available
• Actions after re-sorting the list: Completing, editing and deleting the first and last tasks after each sort was not completed
• Closing the task editor with Cancel or by clicking outside it: Only Escape was tested
• Formatting tags in notes and avatar URL fields: Only task titles and the display name were checked
• Losing the connection while creating a task or saving settings: Only completing a task while offline was tested
• Empty dashboard: New accounts always start with a welcome task, so a truly empty list was never seen
• Full keyboard-only use: Only partly checked
• Creating tasks on a phone: Skipped to avoid creating more test data

Out of scope

Bugsniffer does functional QA only. We did not do, and never do:

• Security testing (injection, authentication bypass, access-control probing, secrets scanning)
• Load, stress and performance-under-load testing
• Reading or scanning your JavaScript bundles, source maps or hidden endpoints
• Guessing URLs or API endpoints not reachable through your interface
• Third-party sign-in (Google, GitHub, Apple and similar) and anything hosted off your own domain
• Real payments (only a test-mode card your site clearly offers is used)
• Sending email to anyone other than our own test inboxes
• Native mobile apps (your site is tested in a mobile-sized browser)
• The Team plan's 'Talk to us' button leads to the contact form; no sales conversation was started
• Test data left in place: three accounts (sniff-taskpup-deep-keys2-1, -2 and -3 @bugsniffer.io), six tasks starting 'Bugsniffer QA' on account 1, and one test-mode $9.00 Pro upgrade on account 1. Contact form attempts were all rejected by your server, so no messages should have reached you

How we tested

Two different AI models worked on your app. One planned the tests and then checked every result; the other used your site in a real browser, the way a careful first-time user would, on a desktop screen and a 390-pixel phone screen. Every bug above was backed by a screenshot and the browser’s own records before it made this list. This Deep run took 61.2 minutes and stayed on your own domain (sniff-target.pages.dev).

Test accounts we created use addresses like sniff-…@bugsniffer.io and names starting “Sniff”. You can delete them.