Where your code goes
“Local-first” should be verifiable, not a slogan. This page explains exactly what happens to your code when CodeCrab runs a review.
The short version
- CodeCrab has no code server. Your repository, diffs and review results are never uploaded to CodeCrab.
- Reviews run on your machine, against your local clone, using the AI CLI you installed and signed into (Claude Code, Cursor CLI, Codex CLI or Copilot CLI).
- Your AI provider does see the code it reviews. The CLI sends the relevant code to its own provider (for example Anthropic, OpenAI, Cursor or GitHub) under the account, subscription or API key — and the data terms — you already have with them.
Data flow
Your local repo ──► CodeCrab (desktop app, your machine)
│
▼
Your AI CLI (claude / cursor-agent / codex / copilot)
│ your own login or key
▼
Your AI provider ◄── the only place code is sent
CodeCrab servers ◄── anonymous usage events only (no code)Control and permissions
- Reviews are read-only by default. CodeCrab does not commit, push or post comments without your explicit action.
- GitHub and GitLab access uses your own CLI login (gh / glab). CodeCrab does not ask for organization-wide OAuth permissions.
- Every command the app runs is visible in the live execution console.
- If your company already approved a provider (for example a business plan with no training on your data), CodeCrab keeps you inside that agreement.
What CodeCrab does collect
Anonymous product usage events — never source code. See the Privacy page for the full list.
Report a vulnerability
Found a security issue? Please report it privately through the contact page (choose “Bug” and start with “SECURITY”). I will acknowledge it as quickly as possible and keep you updated until it is fixed.