Last updated: May 15, 2026
Account data: email address, name (optional). Payment data: processed by Stripe — we never see your card details. Consent signals: anonymized records of visitor consent choices (action, region, timestamp — no IP addresses or personal identifiers).
To provide the Crumb service: consent banner delivery, analytics dashboards, cookie scanning, and policy generation. To send transactional emails: account, billing, and scan notifications. We do not sell your data.
Data is stored in Supabase (Postgres) in the US-West-2 region. Redis caching via Upstash. All connections are encrypted in transit.
Stripe (payments), Resend (email), Anthropic Claude (AI policy generation — scan data only, no personal data), Browserless.io (cookie scanning), Vercel (hosting), Cloudflare (DNS).
You can access, export, or delete your account data at any time from the dashboard settings. GDPR/CCPA: email hello@trycrumb.app for data requests.
We use only essential cookies: authentication session and consent preferences. No tracking or advertising cookies. We practice what we preach.
Data controller: Crumb team. Email: hello@trycrumb.app.