This Privacy Policy describes how Crawdad Security ("we," "us," "our") handles information in connection with the Crawdad software and the getcrawdad.dev website (collectively, "the Service"). Contact: contact@getcrawdad.dev.
Your AI agent content stays on your machine.
All prompts, responses, tool-call arguments, and PII are inspected entirely on your device by a local proxy. Detection — all seven layers including ML inference — runs on-device. Content is stored only in local databases. It is never transmitted to Crawdad.
Usage and metering are measured locally and are never transmitted to Crawdad or any third party.
We collect your email address and plan selection when you sign up. Stripe handles payment data — we never see or store your card number. That is essentially the entire server-side collection.
There is one opt-in exception where content can leave your machine, described below.
The L7 cloud LLM Judge is off by default. It is gated behind an explicit in-app warning and confirmation.
If — and only if — you explicitly enable a cloud backend for the L7 Judge, Crawdad sends up to ~2,000 characters of flagged content to your own configured LLM provider (e.g., Anthropic, OpenAI) for analysis. The content goes to that provider, not to Crawdad.
The recommended configuration is a local model (Ollama), which keeps everything on-device. When the Judge is disabled or uses a local backend, no content leaves your machine for analysis.
The following never leaves your machine (subject only to the cloud-Judge exception above):
When you sign up via the website or subscribe to a paid plan, we collect:
This data is stored in PostgreSQL on our gateway server (hosted on Railway). We also store a tenant ID (generated UUID), hashed API key (SHA-256 — the plaintext key is returned to you once at signup and is not stored), and timestamps.
Payment processing is handled entirely by Stripe, Inc. We receive from Stripe via webhook: your email address, Stripe customer ID, and subscription plan. We do not receive or store your credit card number, CVV, or billing address. Stripe's privacy policy governs the handling of your payment information.
The sidecar makes the following outbound calls, and no others. You can verify against the running process using netstat, Little Snitch, or an equivalent tool.
api.anthropic.com, api.openai.com). These requests are identical to what your agent would send without Crawdad — the request was going there anyway. Crawdad adds an x-crawdad-protected: true header; no content goes to Crawdad in this path.getcrawdad.dev. No account, device, or tenant identifier is attached. Files are SHA-256 verified. Suppress with CRAWDAD_ML_DISABLED=1.No other outbound calls are made by the sidecar.
Crawdad stores data on your machine in a per-user directory (~/Library/Application Support/crawdad/ on macOS, ~/.local/share/crawdad/ on Linux). The directory is created with owner-only permissions (0700). Contents include:
sessions.db — session recordings, detection events, audit trail, agent identity data.pending.db — blocked events awaiting user resolution.audit.db — cryptographically chained audit log (SHA-256 Merkle chain).config.json, protection_mode.json, ml_threshold.json, policy KDL files).This data is readable only by your user account. Crawdad does not encrypt the database files at rest; they rely on your operating system's disk encryption. You can delete all data by running the uninstaller with --purge or manually removing the directory.
The getcrawdad.dev website is hosted on Cloudflare Workers. When you visit, Cloudflare collects standard access logs (IP address, user agent, request path, timestamp) per Cloudflare's retention defaults. We do not use analytics services, advertising, or retargeting pixels. The site loads fonts from Google Fonts (fonts.googleapis.com), which receives font-file requests with your IP address.
| Service | Purpose | Data received |
|---|---|---|
| Stripe | Payment processing | Email, subscription plan, payment method (card data handled by Stripe, never received by Crawdad) |
| Railway | Gateway hosting (PostgreSQL) | Signup email, plan, hashed API key, tenant ID, timestamps |
| Cloudflare | Website hosting, CDN | Standard web server logs (IP, user agent, path, timestamp) |
| Google Fonts | Font delivery | IP address, user agent (standard font-file request) |
| ntfy.sh | Founder signup notifications | Email, plan, tenant ID (sent to a non-guessable topic) |
| Sentry | Crash reports (gateway always, sidecar opt-in) | Stack traces, version, OS — aggressively scrubbed, no PII (see below) |
| User's LLM provider | Proxy pass-through + optional cloud Judge | User's own API requests (pass-through); up to ~2,000 chars if cloud Judge enabled |
Crawdad includes optional crash reporting via Sentry. On the sidecar, it is OFF by default and requires two gates:
telemetry.crash_reports_enabled).When enabled, crash events are aggressively scrubbed before transmission: breadcrumbs cleared, user info removed, request context removed, strings truncated to 200 characters and replaced with [scrubbed] if they contain non-safe characters. send_default_pii is set to false. The gateway's Sentry instance runs with the same send_default_pii: false configuration.
Depending on your jurisdiction, you may have rights regarding your personal information under laws such as the GDPR, CCPA, or similar frameworks. Because Crawdad stores your AI agent data locally on your machine, you have direct control over all software-side data. For the account-level data we hold (email, tenant ID, subscription records), you may:
Account-level data may be processed in the United States where our infrastructure is hosted.
Crawdad is a professional security tool not intended for use by children under 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. The effective date at the top indicates the most recent revision. For material changes, we will notify account holders by email at least 30 days before the change takes effect.
Crawdad Security
contact@getcrawdad.dev
Governing law: New York, USA.