1. Information We Collect
When you use Crawlio, we collect the following information to ensure security and improve your experience:
- IP Address: Used for security purposes, rate limiting, and bot protection.
- Device Type: Desktop, Mobile, or Tablet to optimize your experience.
- Browser Information: Browser name and version for compatibility.
- Operating System: OS information to ensure proper functionality.
- Device Fingerprint: A unique identifier generated from your device settings to prevent unauthorized access and enforce device limits (max 3 devices per account).
- Username: Your account username for identification.
- Files Uploaded: Files you upload to your cloud storage (stored securely).
2. Why We Collect This Data
- Bot Protection: IP tracking and rate limiting prevent automated attacks.
- Device Management: Device fingerprinting ensures only authorized devices access your account.
- Security: IP blocking protects against brute force login attempts.
- Analytics: Browser and device information helps us improve compatibility.
3. Data Storage
All collected data is stored securely in our database. Your passwords are hashed using bcrypt and never stored in plain text. Files are stored with encryption.
4. Data Retention
- IP Addresses: Stored temporarily for security monitoring and rate limiting.
- Device Fingerprints: Stored until you manually remove a device or delete your account.
- Files: Stored until you delete them or delete your account.
- Trash: Files remain in trash for 30 days before permanent deletion.
5. Third-Party Services
We use the following third-party services:
- ipify.org: To detect your public IP address for security purposes.
- Font Awesome: For icons used throughout the interface.
- Google Fonts: For typography.
6. Your Rights
You have the right to:
- Access the data we store about you.
- Request deletion of your account and all associated data.
- Remove connected devices from your account.
- Opt out of non-essential tracking.
7. Security Measures
- Password hashing using bcrypt.
- Rate limiting to prevent brute force attacks.
- IP blocking after multiple failed attempts.
- Device fingerprinting for session management.
- Secure database connections.
8. Contact Us
If you have any questions about this privacy policy, please contact us through our Telegram channel.