Privacy Policy
Crawlable has no user accounts, no advertising and no third-party analytics. This page lists everything it stores and why — the list is short by design.
Effective 22 September 2026. We will post any material change on this page before it takes effect.
01What we collect
Three categories, and nothing else.
Pages from the site you submit
When you run a scan or audit we fetch publicly reachable pages from the URL you give us and store the resulting analysis — word counts, headings, metadata, structured data, the readability verdict per page — along with extracts of the HTML needed to produce the report.
This is content already published on the open web. We do not fetch anything behind a login or paywall, we do not attempt to bypass access controls, and requests to private or internal addresses are refused.
Billing information, held by Lemon Squeezy
Lemon Squeezy is the merchant of record. Your card details go to them and never reach our servers. What we receive and store is an email address, an order identifier, which plan was bought, and a hash of your licence key.
Worth knowing
We store a SHA-256 hash of your licence key, never the key itself, and display only its last four characters. This means a breach of our database cannot yield working keys — and equally that we cannot recover a lost key for you.
Server logs
Our host records standard request logs: timestamp, path, status code, user agent and IP address. We additionally keep a short-lived record of request counts per IP in order to enforce rate limits on the free scan.
02What we deliberately do not collect
- No accounts, usernames or passwords — a licence key is the only credential.
- No card numbers or payment details; those stay with Lemon Squeezy.
- No third-party analytics, advertising pixels or session recording.
- No cross-site tracking, and no sale or sharing of data with data brokers.
- No marketing email unless you ask for it. Transactional email only.
03Cookies
Crawlable sets no tracking or advertising cookies, so there is no consent banner to dismiss.
The dashboard keeps your licence key in your browser's local storage so you are not retyping it on every visit. That is local to your device, is never transmitted to us as a cookie, and clearing your browser data removes it.
Lemon Squeezy sets its own cookies during checkout, on its own domain and under its own policy. We have no access to them.
04How long we keep things
| Data | Retention |
|---|---|
| Free scan results | 30 days, then deleted |
| Paid audit reports | 24 months, so you can show before-and-after; deleted on request at any time |
| Licence record and email | While the licence is active, then as long as tax law requires records of the sale |
| Rate-limit counters | Rolling window, hours not days |
| Server logs | Per our host's default, roughly 30 days |
05Who processes data on our behalf
- Vercel — hosting and server logs.
- Neon — the database holding licence records and reports.
- Lemon Squeezy — merchant of record; payments, invoicing and tax.
- Resend — delivery of transactional email such as your licence key and audit-ready notice.
Each receives only what it needs for its function. Data may be processed in the United States and the European Union.
06Your rights
You may ask what we hold about you, ask for a copy, ask for it to be corrected, or ask for it to be deleted. Email support@usecrawlable.com and we will respond within 30 days.
Deletion removes your reports and licence record. It cannot be undone, it forfeits unused credits, and we may need to retain the bare transaction record where tax law requires it.
If a site you do not own has been submitted for audit, tell us and we will remove the report.
Questions
Anything here that is unclear, email support@usecrawlable.com. A real person reads it.