Privacy Notice

Last updated: June 22, 2026

This Privacy Notice explains how Praxis LLC ("Praxis", "we") handles personal data in connection with the Data Crumbs browser extension and the Data Crumbs Pro subscription (the "Service"). Praxis LLC is the data controller for the personal data described here.

1. What stays on your device (always)

The core of Data Crumbs is local. Every scan you run, every privacy score, every site you silence and your settings are stored only in your browser's local storage. The list of websites you visit is never sent to our servers.

2. What we collect when you create an account

If you sign up for Data Crumbs Pro we collect:

• Account data — email address, hashed password, account creation date. Used to authenticate you and contact you about the Service. Legal basis: contract performance.
• Usage counters — when you use a Pro feature (cleanse, block, scan), the extension sends a counter event (event type, the domain that was acted on, and a timestamp) so we can show you a weekly footprint report. We do not store URLs, page content, or the contents of cookies. Legal basis: contract performance.
• Support correspondence — anything you send us by email. Legal basis: legitimate interests (responding to you).

3. What Paddle collects when you pay

Payments are processed by Paddle.com, which is the Merchant of Record for the transaction. Paddle collects your billing details (name, billing address, card data, tax ID where relevant) directly and is the data controller for that payment data. Praxis only receives a Paddle customer ID, subscription ID, plan, status and renewal date — not your card details. See Paddle's privacy notice at paddle.com/legal/privacy.

4. Who we share data with

• Paddle (Merchant of Record) — for sale of the subscription, billing, tax compliance, invoicing and refunds.
• Hosting and infrastructure providers (Supabase, Cloudflare) — to operate the account database and serve the website.
• Professional advisers (legal, accounting) where strictly necessary.
• Authorities where required by law.

We do not sell your personal data and we do not share it for advertising.

5. Retention

Account data is kept while your account is active and deleted within 90 days after you delete the account. Usage counters older than 90 days are aggregated and de-identified. Paddle retains transaction data for the period required by tax and accounting law.

6. Your rights

Depending on where you live you may have the right to access, correct, delete or export your personal data, restrict or object to processing, withdraw consent at any time, and complain to your local data protection authority. EEA/UK users have these rights under the GDPR and may also restrict international transfers; we transfer data using Standard Contractual Clauses and equivalent safeguards. To exercise these rights, email privacy@praxisllc.example.

7. International transfers

Our infrastructure is located in the United States and the European Union. Where personal data leaves the UK or the EEA we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

8. Security

We use industry-standard technical and organisational measures (encryption in transit, encrypted databases, role-based access, principle of least privilege).

9. Cookies

Our website uses only strictly-necessary cookies for authentication. We do not use analytics, advertising or tracking cookies on this site.

10. Contact

Praxis LLC — privacy@praxisllc.example