Privacy Policy

• Account info: email, display name, and authentication tokens when you sign in.
• Scan data: URLs you submit, the public HTML we fetch from those URLs, and the scores we compute.
• Usage data: a hashed IP and basic request metadata so we can enforce free-tier rate limits.
• Billing: if you subscribe to Pro, Stripe stores your payment information; we only see customer IDs and subscription status.

We don't crawl pages behind authentication, we don't ingest your site's database or backend, and we don't sell your data.

• Run scans you request and show you the results.
• Generate llms.txt files on demand.
• Send transactional emails (alerts, receipts).
• Improve the scoring engine in aggregate, anonymized form.

Scan reports at /report/<domain> are publicly viewable by anyone with the URL. They contain only information already publicly accessible from your site (HTML, robots.txt, sitemap.xml, llms.txt). If you'd like a report removed, email us.

We use first-party cookies for authentication and to remember your preferences. We do not run advertising or third-party tracking cookies.

• Supabase — database, authentication, file storage.
• Stripe — payment processing.
• Cloudflare — hosting and DNS.
• Resend — transactional email delivery.
• Google Search Console — optional integration if you connect your account.

Scan history is retained while your account is active. Delete a saved site from your dashboard to remove its scan history, or email us to delete your entire account.

You can request a copy of your data, correct it, or delete it by emailing hello@getcrawlable.com. If you're in the EEA or UK, you have rights under the GDPR; if you're in California, you have rights under the CCPA.

We use industry-standard encryption in transit and at rest. No system is perfectly secure; please use a strong, unique password.

We may update this policy. Material changes will be announced by email or in-app notice before they take effect.

For privacy questions, email hello@getcrawlable.com.