Privacy
CodeCrab never collects your source code, diffs or review results. This page lists everything that is collected and why.
Desktop app
To understand whether the app works and where people get stuck, the app sends anonymous events tied to a random install ID:
- Install: app version and operating system.
- Environment check: whether tools like git, gh, glab, Claude Code, Cursor or Codex are installed and signed in (yes/no only).
- Actions: which feature was used (for example “PR review started”), status, error codes, PR number, finding severity, app version and language, and whether it was the demo project.
No file contents, file names, diffs, prompts, AI responses, tokens or API keys are sent.
Website
- Page visits and installer downloads, with basic browser, device and language information.
- Messages you send through the contact form (name, email, message), used only to reply.
Your AI provider
Code reviewed by your AI CLI is handled by that provider under your own agreement with them. See the Security page for the data flow.
Questions or deletion
Ask anything or request deletion of your messages through the contact page.