Privacy policy
Last updated: October 21, 2026
trawl ("we", "us") is operated by Trawl, Inc. We sell data APIs to developers. This page describes what we collect when you use https://trawl.dev and our APIs, and what we do with it.
What we collect
- Account: your email address. That's the whole account model — there are no passwords and no profile fields.
- API usage: for each API request we log the endpoint, response status, timestamp, and originating IP address. We use these logs to meter your plan, enforce rate limits, show you your own usage in the console, and prevent abuse.
- API keys: stored as one-way hashes. We cannot see or recover your key after it's shown to you once.
- Billing: payments are processed by Stripe. Card numbers never touch our servers; we store only Stripe's identifiers for your customer and subscription.
- Email you send us: if you contact [email protected], we keep the correspondence.
Cookies and site analytics
Two cookies of ours. The session that keeps you signed in, and a visitor id that remembers how you found us: the page that linked here, any campaign or ad-click tags on that link, and the first pages you opened. Under that id we also record how the site is used: the pages you view, how long each is open, how far you scroll, which sections come into view, and the links and buttons you click, together with your IP address, approximate location and browser. Nothing you type into a form is recorded. If you create an account, that record is kept with it. This data is kept for 180 days and is used to understand and improve the site and to see which advertising works; it is never sold.
We advertise on Google, and Google's own tag runs on our pages so that Google can tell which of its ads led to an account or a subscription. In the European Economic Area, the United Kingdom and Switzerland the tag runs without consent to store anything: it sets no cookies there and Google receives only cookieless, aggregated signals. Elsewhere it may set Google's advertising cookies. When you create an account or subscribe, a hashed form of your email address may be sent to Google to match the conversion to the ad click; Google cannot read the address from it.
Who we share data with
Only the processors needed to run the service: Stripe (payments) and Resend (transactional email — login codes and account notices). We do not sell or rent your data to anyone.
Browser extension
Our Chrome extension, Sold Comps for eBay, sends one kind of request, to api.trawl.dev: the search words and filters you chose (or that it read from the eBay search URL or listing you were looking at, including the listing's title, price, brand and model), the marketplace, and your trawl API key in the request header. That request is logged like any other API request, as described above. The extension stores your API key and your recent searches only in your own browser, reads nothing else from eBay or from any other site, and contains no analytics or tracking.
Retention and deletion
Account data is kept while your account exists. To permanently delete your account, email [email protected] — we cancel any active subscription and remove your data from active use. Request logs are retained for a limited period for billing accuracy and abuse prevention, then removed.
Your rights
Email [email protected] to access, correct, or erase the data we hold about you. We answer within 30 days.
Changes
If this policy changes materially, we'll note it here with a new date. Questions: [email protected].