Privacy policy
Who we are
Crawlony is run by a private individual in Thailand. We are responsible for the personal data described here. You can reach us at support@crawlony.com.
The short version
- Your scans, reports, client names and screenshots stay on your own PC. We never receive them.
- We store your account, your subscription status and which PC your licence is active on.
- We do not use cookies for statistics or marketing, and we do not sell or share your data for advertising.
What we store
- Account: your email address and a user ID. Logins are handled by Google Firebase; your password is never visible to us.
- Subscription: your Stripe customer ID, and whether your subscription is active and when it renews. Payments, invoices and billing details (name, address and card) are handled by Stripe; we never see your card details.
- Licence: which PC your licence is active on. This is a one-way fingerprint of the computer (not the Windows ID itself), the computer's name, when the licence was activated and last used, and how many times it was moved in the last 30 days.
- Technical data: your IP address is kept for one minute to stop anyone overloading the licence server. Our host, Simply.com, keeps standard web server logs.
What stays on your PC
Crawlony runs on your computer. The websites you scan are fetched from your PC, and the results, reports, PDF files, client names and screenshots are stored only there. Deleting the app's data folder removes them.
Why we use your data
We follow Thailand's Personal Data Protection Act (PDPA) and, for users in the EU and the UK, the GDPR.
- To provide the service (your account, subscription, licence and updates): this is necessary for our agreement with you (GDPR article 6(1)(b)).
- To keep the service secure and prevent abuse of licences: our legitimate interest (article 6(1)(f)).
- To remember your language and keep the website in your browser's cache: only with your consent (article 6(1)(a)), which you can withdraw at any time.
Who processes data for us
- Google Firebase (Google Ireland Ltd. and Google LLC): login and accounts.
- Stripe: payments, subscriptions and invoices.
- Simply.com (Denmark): hosting of the website, licence server and downloads.
Some of these companies are based outside your country, for example in the United States or the EU. Transfers are covered by the companies' data protection terms, such as the EU–US Data Privacy Framework or the EU's standard contractual clauses.
How long we keep it
- Account, subscription and licence data: for as long as you have an account.
- IP addresses for rate limiting: one minute.
- Web server logs: as long as Simply.com keeps them for operating the server.
You can delete your account under Profile in the app. Write to us at support@crawlony.com and we will also delete the remaining licence record within 30 days.
Cookies and similar technologies
- crawlony_consent (necessary, 12 months): remembers your cookie choice.
- Login storage (necessary, until you log out): Firebase keeps you logged in on the account page.
- Payment cookies (necessary, set by Stripe): only when you pay.
- crawlony_lang (preferences, 12 months, only with consent): remembers your language.
- Offline cache (preferences, only with consent): keeps the website's files in your browser so it opens faster. It is removed when you withdraw consent.
You can change your choice at any time under Cookie settings.
Your rights
You can ask to see, correct, delete or receive a copy of your data, ask us to restrict or stop using it, and withdraw consent. Write to support@crawlony.com. You can also complain to the data protection authority where you live or, in Thailand, to the Personal Data Protection Committee (pdpc.or.th).
Changes
If we change how we use your data, we will update this page and, for important changes, tell you by email.