Legal

Privacy policy

Last updated: August 2026

What we collect

Account data (name, email, credentials in hashed form), workspace and project configuration, and the observation data produced by crawling the sites you register: fetched page metadata, snapshots, diffs, rule results and incidents. If you submit a Demo or Contact form, we collect the name, work email, company and request details you provide, together with the selected form options, locale and sanitized UTM source, medium and campaign values when present.

How we use it

To operate the monitoring pipeline, deliver notifications, meter usage and billing, provide support, respond to Demo and Contact requests, and keep the platform secure. We do not sell your data, and we do not use your observation data to train advertising profiles.

Public form security and access

Demo and Contact forms use Cloudflare Turnstile to distinguish legitimate browser activity from abuse. We also process security metadata such as cryptographic hashes derived from network and browser information for rate limiting, duplicate analysis and abuse prevention; the inbound-request record does not store your raw IP address. Turnstile tokens are verified and are not retained as business data.

Authorized CrawlDrift platform operators can access submitted requests to review and respond to them. This access is permission-controlled and audited. Cloudflare and our hosting, analytics and infrastructure providers process relevant data only where applicable to providing these services.

Public form retention

Demo and Contact requests are generally retained for up to 365 days after submission and then deleted with related idempotency data, unless a different period is required for legal, security or active business correspondence. You may request earlier deletion subject to applicable retention requirements.

Telemetry and metrics

We never include tenant identifiers in our operational metrics we keep workspace, project, user, and URL values strictly out of our metric labels. We use Google Tag Manager and Google Analytics 4 to measure aggregate page, signup, activation, subscription-funnel and public-form interactions. Form analytics contain only the event source, form type and locale; they do not contain form fields or request IDs. If you deny analytics storage, we may use Google Consent Mode for cookieless, anonymous measurement; we enable optional analytics storage and authenticated User-ID only after you grant consent. For User-ID, we strictly use our opaque internal identifiers, never your email address, name, domain, URL, session token, or any other direct personal identifier.

Normal support access

Normal support access is subject to authorization and audit controls under our support policy. Contact [email protected] with questions about how those controls apply to your data.

Your rights

You can request access, correction or deletion of personal account data at any time, subject to applicable retention requirements. Contact us at [email protected] for privacy requests.