Privacy Policy

Last updated: September 15, 2026

What we collect

Account data you give us (name, email, avatar), the content your team and its agents put on the canvas (screens, annotations, files), and technical logs needed to run the service.

Sign-in

You can sign in with email and password or with Google. With Google we receive your name, email and avatar; we never see your Google password.

Payments

Subscriptions are processed by Stripe. Card details go to Stripe and never touch our servers. We keep the subscription status and the Stripe customer id.

Email

We send transactional email only (verification, invitations, password reset) through Resend. No marketing without your consent.

Analytics

We use Google Analytics (GA4) on the public pages of croqui.dev to count visits and see which pages bring people in. Outside Europe it sets cookies in your browser and sends usage data to Google, which may combine it with other data it holds about you. In the EEA, the UK and Switzerland we run Google Consent Mode with storage denied by default: no cookie is written and no one is identified — the visit is counted with an anonymous, cookieless ping. It runs on the public site only — never inside the app, and never on a team’s own custom domain. Anywhere, you can opt out with Google’s browser add-on or any tracker blocker; nothing on the site depends on it.

Where data lives

Servers in the United States (AWS, us-east-1). Daily backups are kept for seven days.

Your rights

You can export your projects at any time from the app and ask us to delete your account and its data by email. Team owners can delete their team; projects are kept unlinked until an admin removes them.

Questions: [email protected]