Privacy
Last updated October 20261. Who we are
WeaveCrawl operates weavecrawl.com. For any privacy question write to hello@weavecrawl.com.
2. What we collect
Analytics (only if you accept)
We use Google Analytics 4 to collect pseudonymous usage data: pages visited, time on page, and general device information (browser type, screen size). This data is tied to a random analytics ID, not to your name or email. No data is collected unless you click Accept analytics on the cookie banner.
Account data
When you create an account we collect your email address, name, password (stored as a one-way hash), and any passkeys you add. We also record which devices you have linked and your licence state. Legal basis: contract (GDPR Art. 6(1)(b)).
Waitlist and early access
If you join the waitlist we store your email address, the time you gave your consent, which version of the consent text you agreed to, and whether you ticked early access as a tester. Why: to contact you about WeaveCrawl access, based on your consent (GDPR Art. 6(1)(a)). How long: until WeaveCrawl access starts for you or you withdraw, whichever comes first. To withdraw or have your entry deleted at any time, write to hello@weavecrawl.com.
Staying signed in
When you sign in, the brain sets one session cookie (__Host-wc_session). It keeps you signed in and stays for up to 90 days (30 days if unused). Legal basis: contract (GDPR Art. 6(1)(b)) and § 25(2) TDDDG; no consent is needed.
Licence check-in
A WeaveCrawl brain checks in with our licence server about once a day. It sends a random install ID, the product version, your licence ID and type, and counts of accounts, devices and agent runs per day. No names, emails or web content. Purpose: to keep the licence valid and prevent misuse. Legal basis: contract (GDPR Art. 6(1)(b)) and legitimate interest (GDPR Art. 6(1)(f)).
Security and licence records
We record security and licence events (a device linked, a licence issued, an account deleted) without the content of your work. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). These records are deleted with your account.
Required data and automated decisions
You need to give your email address to create an account or join the waitlist; without it we cannot offer this. We do not make decisions about you by automated means.
Server logs
Our servers log your IP address, the time of each request, and the page or API endpoint you reached. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Logs are kept only as long as needed to diagnose outages and detect abuse.
The emails we plan to send
We do not send emails from this site yet. When we start, there will be three kinds. Account and security: confirm your email, sign-in codes, invites; always on while you have an account. Product updates: when WeaveCrawl opens to you, testing, big changes; from pressing Join, off any time. Promotional: news and offers; only if you tick its own box; unsubscribe in one click in every email.
3. Cookies
Google Analytics sets the first two cookies only if you accept analytics. The third is set by the brain when you sign in.
| Cookie | Purpose | Kept for |
|---|---|---|
| _ga | Identifies your browser (random ID) | 2 years |
| _ga_* | Stores session state | 2 years |
| __Host-wc_session | Keeps you signed in (set by the brain) | Up to 90 days, 30 if unused |
Apart from cookies, this site keeps a few things in your browser only: your theme choice, your analytics choice and, if you open the site from your own brain, that brain's name and address. None of it is sent to our server. A few short-lived values (a share token, a device reference, an account link code) stay in your browser tab until you close it.
4. Data processors
Analytics data is sent to Google LLC (United States) only if you accept. Legal basis: your consent (GDPR Art. 6(1)(a)). Google LLC is certified under the EU-U.S. Data Privacy Framework, which is the basis for this transfer (Art. 45 GDPR).
The site runs on our own server. Traffic is routed through Cloudflare, Inc. (United States), which acts as a processor for request data in transit. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, which is the basis for this transfer (Art. 45 GDPR).
5. Your rights (GDPR)
You have the right to access, correct, delete or restrict the processing of your data, to object, to receive your data in a common format, and to withdraw consent at any time.
To save your data: use My account → Export my data.
You also have the right to complain to a data protection authority, for example the one of your state of residence or the one responsible for us.
To withdraw analytics consent: use the cookie settings link below.
To delete your account and all account data: use My account → Delete account. A revoked licence record stays, without your details.
To exercise other rights, write to us. hello@weavecrawl.com.
6. Changes
We will update this page when our practices change. The date at the top shows when it was last revised.
This site is run by Said Mustafa Said. Contact: hello@weavecrawl.com.