Short version: we collect an email address if you ask us to send you something, and nothing else. No advertising, no tracking pixels, no third-party analytics, no cookies for marketing.
The Crawl Price Index is operated by Alexander Balieu, sole trader, based in Luxembourg, acting as data controller. Contact: hello@crawlpriceindex.com. Postal address available on request.
| Data | Why | Legal basis (GDPR Art. 6) | Kept |
|---|---|---|---|
| Email address (newsletter / data sample) | To send The Weekly Crawl and your sample link | Consent — 6(1)(a), given by confirming via the double opt-in email | Until you unsubscribe, then deleted |
| Email address + domain (change alerts) | To tell you when AI-crawler access to that domain changes | Consent — 6(1)(a), confirmed by email | Until you stop the alert, then deleted |
| Email address, name, billing details (subscribers) | To provide the subscription, issue your API key, and meet invoicing and tax obligations | Contract — 6(1)(b); legal obligation — 6(1)(c) for accounting records | Duration of the subscription, then as long as tax law requires |
| API key usage counts | To enforce the monthly rate limit and detect abuse | Contract — 6(1)(b); legitimate interests — 6(1)(f) | Rolling monthly counter |
| Blockchain payment reference (machine tier) | To verify a payment and prevent the same one being redeemed twice | Contract — 6(1)(b) | 30 days |
Each is bound by a data-processing agreement. Some may process data outside the EEA under the European Commission's standard contractual clauses.
Our hosting provider processes standard request data (IP address, user agent, timestamp) transiently to deliver the site and protect it from abuse, on the basis of legitimate interests — GDPR Art. 6(1)(f). We do not build analytics from it, and we do not use it to identify visitors.
Under the GDPR you may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing rests on consent, you may withdraw it at any time — every email we send carries a one-click unsubscribe link, which deletes the record rather than merely flagging it.
Email hello@crawlpriceindex.com and we will respond within 30 days. You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD), or with the authority in your country of residence.
The index itself measures how websites respond to automated crawlers: robots.txt directives, HTTP status codes and payment headers. That is information about domains and their configuration, not about individuals, and we store no page content. Our full method is published in the methodology. If you operate a site and want it excluded from the index, email us from a domain-verifiable address and we will remove it.
Data is held in Cloudflare infrastructure. Secrets are stored encrypted and are never in source control. Our crawler signs its own requests cryptographically so sites can verify our traffic. To report a vulnerability, see security.txt.
Material changes to this policy will be noted in the changelog with a date. The "last updated" date above always reflects the current version.