Privacy policy
Last updated: September 3, 2026
trawl ("we", "us") is operated by Trawl, Inc. We sell data APIs to developers. This page describes what we collect when you use https://trawl.dev and our APIs, and what we do with it.
What we collect
- Account: your email address. That's the whole account model — there are no passwords and no profile fields.
- API usage: for each API request we log the endpoint, response status, timestamp, and originating IP address. We use these logs to meter your plan, enforce rate limits, show you your own usage in the console, and prevent abuse.
- API keys: stored as one-way hashes. We cannot see or recover your key after it's shown to you once.
- Billing: payments are processed by Stripe. Card numbers never touch our servers; we store only Stripe's identifiers for your customer and subscription.
- Email you send us: if you contact [email protected], we keep the correspondence.
Cookies
Two cookies, both ours. The session that keeps you signed in, and a visitor id that remembers how you first found us: the page that linked here, any campaign tags on that link, and the first pages you opened. If you create an account, that record is kept with it. No advertising trackers, no third-party analytics cookies.
Who we share data with
Only the processors needed to run the service: Stripe (payments) and Resend (transactional email — login codes and account notices). We do not sell or rent your data to anyone.
Retention and deletion
Account data is kept while your account exists. To permanently delete your account, email [email protected] — we cancel any active subscription and remove your data from active use. Request logs are retained for a limited period for billing accuracy and abuse prevention, then removed.
Your rights
Email [email protected] to access, correct, or erase the data we hold about you. We answer within 30 days.
Changes
If this policy changes materially, we'll note it here with a new date. Questions: [email protected].