Privacy Policy
Version of 2026-09-08 · Русская версия ниже
Who is responsible
The data controller is Malkovich, a sole proprietor registered in Russia (tax ID 246315789012, Krasnoyarsk), operating the CrawlSweep service at crawlsweep.com. For any question about your data, write to info@crawlsweep.com. We answer every message ourselves.
What we collect
Only what the service cannot run without:
- Your email address — signing in, and messages about your scans.
- A username, if you chose one — a second way to sign in.
- Your password, stored as an irreversible hash. We do not hold the password itself and cannot recover it, only replace it.
- Interface language: the one you picked and the one your browser reports.
- Sign-up date, last sign-in, and the fact and version of your consent to this document.
- The site addresses you add as projects, and the results of scanning them.
- Credit movements on your account.
What we do not collect
There are no analytics counters or advertising trackers on this site. We do not buy data about you, build behavioural profiles, or use your data for advertising. We hold no payment details: the site takes no payments. We do not knowingly collect data from anyone under 16.
Why we process it, and on what legal basis
- To perform our contract with you — giving you an account, crawling the sites you ask us to, preparing the report and the spec, keeping credit accounting, and answering your messages.
- Our legitimate interest — keeping the service secure and working, and preventing abuse.
- Your consent — connecting your Google Search Console account, which you give separately and can withdraw at any time.
We do not sell your data
We do not sell, rent, or share your personal information, and we never have. Nothing here supports advertising, cross-context behavioural profiling, or any similar purpose. If you are a California resident, treat this paragraph as our answer to the do-not-sell and do-not-share rights: there is nothing to opt out of.
Who else is involved
Four processors take part in running the service, and this is what each one sees:
- DeepSeek (China) — the language model that writes the report and the spec. It receives a digest of YOUR SITE: page addresses, headings, the issues found. Your email, username and account data are never sent to it. This is a transfer outside the EU; if your site pages themselves contain personal data, that data travels with the digest.
- DigitalOcean (machines in Frankfurt, Germany) — the temporary machines that run the crawl. They live for minutes and are destroyed with everything on them.
- Our mail server (Amsterdam, the Netherlands) — delivery of the messages you expect from us. It sees the recipient address and the message text.
- Google Search Console — only if you connect your own site. We then receive search statistics for YOUR site. The access key is stored encrypted and can be disconnected at any time in project settings.
Where the data lives
Accounts, scan results and the credit ledger sit on a server in Amsterdam, the Netherlands. The crawl machines start in Frankfurt, Germany. Both are inside the European Union. The one transfer that leaves it is named above: the site digest sent to the language model.
How long we keep it
- Account data — for as long as the account exists.
- Scan results — the two most recent scans per project; older ones are evicted automatically.
- The credit ledger — three years after the account is closed. These are financial records and cannot be deleted immediately.
- Everything else is deleted with the account, within 30 days of your request.
Your rights
You can ask for a copy of your data, correct it, withdraw your consent, have it deleted, receive it in a portable form, object to processing, or ask us to restrict it. Write to info@crawlsweep.com from the address your account is registered to and we will answer within 30 days, free of charge. Withdrawing consent means closing the account: without processing your email and your site addresses the service cannot work.
If you are in the European Union and think we have handled your data badly, you may complain to your national data protection authority. We would rather you told us first — write to info@crawlsweep.com and we will fix it.
Cookies
One technical cookie, which keeps you signed in between pages. Signing in is impossible without it, so it needs no consent and there is no cookie banner to click away. We use no advertising or analytics cookies.
How we protect your data
The connection to the site is encrypted. Passwords are stored as hashes and third-party keys are stored encrypted. Only the service itself and its owner can reach the database. If a breach happens and it puts you at risk, we will tell you, and we will notify the competent supervisory authority within 72 hours.
Changes
A new version appears on this page with a new date. If the substance of the processing changes, we will write to you and ask for your consent again.