Privacy policy

Last updated: 1 April 2025

What we collect

crawwwl collects the minimum data necessary to provide the service.

  • Email address: collected only when you create an account. Used for authentication and account-related communication. Never used for marketing without explicit opt-in.
  • Audit results: when you run an audit, the source files you submit and the resulting report are stored in our database, linked to your account. This is necessary to provide the audit history feature and to allow you to retrieve past reports.
  • Credit transactions: records of credit top-ups and usage are stored to maintain accurate account balances.

Free audits (quick and standard) run without an account. In that case, the audit payload is processed and discarded after the report is returned. It is not stored permanently.

What we do not collect

  • No page view tracking or analytics cookies
  • No third-party advertising or tracking scripts
  • No device fingerprinting
  • No sale or sharing of personal data with third parties

How data is stored

All data is stored in Supabase, a Postgres-based cloud database with row-level security enabled. Data is stored in the EU (AWS eu-west-2). Supabase's infrastructure is SOC 2 Type II certified.

Authentication is handled by Supabase Auth. Passwords are never stored in plaintext.

Your source code

When you run an audit, the contents of your source files are sent to our API for processing. We do not read your source code for any purpose other than running the audit. Audit payloads from authenticated users are retained in your audit history. You can delete individual audits from your dashboard at any time.

We do not use your code to train AI models or to improve our scanners beyond the scope of your own audit.

Payments

Payments for deep audits are processed through Stripe. crawwwl does not store your card details. Stripe's privacy policy applies to payment processing: stripe.com/privacy.

Data retention

Account data is retained for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing privacy@crawwwl.com. Deletion requests are processed within 14 days.

Cookies

crawwwl uses only functional cookies necessary for authentication (session tokens). No cookies are set for tracking or advertising.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify users by email.

Contact

Questions about privacy: privacy@crawwwl.com