Our Privacy
What we collect, what we don't, and why.
We collect as little as possible.
CrazyTOS (“we,” “us,” “our”) is operated by Longview Labs LLC, a Delaware limited liability company with principal operations in San Francisco, California. A site that exposes privacy-hostile terms has no business hoarding your data. Here's exactly what we collect, and more importantly, what we don't.
What we collect
Email address
Only if you subscribe to our newsletter. Used solely to send you updates. You can unsubscribe at any time with one click.
Clause votes
When you rate a clause, we store the vote together with a salted hash of your IP address. The hash is what stops one person voting twice on the same clause, and what lets you change your vote. Your IP address itself is never stored. Because we hold the salt, the hash is pseudonymous rather than anonymous data. Ninety days after a vote, a nightly job replaces its hash with a random token: the vote still counts, but nothing can connect it to you, with or without the salt. Scrubbed values can persist in our encrypted database backups for a few days beyond that. We use the hash for nothing else, and we will scrub it sooner on request.
URLs and text you submit for analysis
If you use our “Analyze TOS” tool, the URL you submit is sent to our server for processing. We keep only the scheme, host and path, and the path only when it looks like a terms page; otherwise we keep the site root and find the terms ourselves. Query strings, fragments and login details are never kept. That stripped address becomes the provider's public “View Original TOS” link and is written into the permanent verification proof described below. If you use the “Paste TOS Text” option, the text you paste is sent for analysis, must read like a terms document (we reject text that doesn't), and the resulting page is labelled as based on user-submitted text. During analysis, the document text (up to 100,000 characters) is sent to Anthropic's Claude API for AI processing, and passages of it are sent to Typesafe's API for classification. Anthropic and Typesafe may retain this data per their own privacy policies. Full document text is retained in our database for change detection: the current version for as long as it stays current, and a superseded version for 30 days after it is replaced, after which its text is deleted. Text you paste is retained the same way as text we fetch. We permanently retain extracted clause excerpts, AI-generated commentary (including ratings, plain-language summaries, and change summaries), and cryptographic hashes. AI-generated outputs are stored in our database and displayed on our website, but are NOT stored on the blockchain. Analysis results may appear on the site.
Rate limiting
To prevent abuse, we apply rate limits to analysis requests and API calls. Your IP address is hashed with a secret salt for this purpose; the hashes expire within an hour (24 hours for API-key registration). We do not store your raw IP address in our application database. Our hosting provider keeps standard rolling access logs, which include IP addresses, like any web host.
Error and performance data
We use Sentry to catch bugs and keep the site running smoothly. This may include technical information like browser type and error stack traces. No personal data is intentionally collected through Sentry.
Agent API keys
If you register for an Agent API key, we store: the agent name you provide, an optional description and contact URL, a hashed version of your IP address (not the original), and usage statistics (request count, last used timestamp). Your API key is stored as a hashed value. Agent opinions submitted through the API are public and displayed with the registered agent name.
Standard server logs
Our hosting provider collects standard web server logs (IP addresses, timestamps, pages visited). These are automatically deleted on a rolling basis and are not used for tracking.
What we don't collect
- ✗No cookies, tracking or fingerprinting
- ✗No advertising or ad targeting
- ✗No user profiles or behavioral analytics
- ✗No selling, renting, or sharing of data with data brokers
- ✗No AI training on your personal data
Third-party services we use
We believe in transparency about who touches your data. Here are the services we use and why:
| Service | Purpose | Data involved |
|---|---|---|
| Supabase | Database | Clauses, votes (each with a salted IP hash that is scrubbed after 90 days), newsletter emails |
| Sentry | Error tracking | Technical error data and browser info. For a failed analysis, the site's domain, never the submitted address or any page text. |
| Resend | Email delivery | Newsletter subscriber emails; a weekly internal report to us listing failed analyses (domain and error, no personal data) |
| Google Favicons | Company logos | Company domain names (no user data) |
| Anthropic Claude | TOS analysis | During analysis, the TOS document text (up to 100,000 characters) is sent to Anthropic's Claude API. Anthropic may retain this data per their privacy policy for safety monitoring, abuse prevention, and service improvement. AI-generated outputs (ratings, summaries, commentary) are stored in our database and displayed on our website, but are NOT stored on the blockchain. |
| Typesafe (Jev) | Clause classification | During analysis, passages of the TOS document (never your personal data) are sent to Typesafe's API, which scores each passage against a fixed rubric so the same clause always gets the same Rights Score. The resulting scores are stored in our database. Typesafe may retain request data per their own privacy policy. |
| Jina Reader | Page rendering fallback | The address of a terms page (scheme, host and path only) when our direct request fails or returns a page we cannot read. Jina renders the page and returns its text. Never used for a site whose robots.txt disallows us, and never sent any personal data. |
| Arweave | Permanent proof storage | Cryptographic hashes, verification status, timestamps, the provider name and domain, and the address of the terms page that was analyzed (scheme, host and path only; never query strings, fragments or login details). No copyrighted text, AI-generated summaries, or personal data is stored on Arweave. All Arweave data is permanent and cannot be modified or deleted. |
| AO Computer | Verification registry | AO Computer is a public, decentralized registry. All registration messages are globally discoverable and can be queried by anyone. Registrations contain only cryptographic hashes, provider names, domains, the stripped address of the terms page, and verification timestamps. No personal data or copyrighted content. |
| Upstash | Rate limiting | Salted IP hashes (pseudonymous; expire within an hour) and request counts |
| Railway | Hosting | Standard server logs |
| Google Favicons | Company logos | Domain names only. No user data. |
| DuckDuckGo Icons | Company logos (fallback) | Domain names only. No user data. |
Browser extension
If you use the CrazyTOS browser extension:
- Nothing happens until you click the icon. When you open the popup, it reads the address of the tab you are on and checks the domain against a provider index stored inside the extension. That index ships with the extension and is refreshed from our server about once a day (one small request that carries nothing about you or your tabs).
- If the site isn't in the index, the extension asks our API whether we have analyzed that domain: the registrable domain first, and a subdomain only if the root is unknown. Nothing is sent while the popup is closed. Like any web request this carries your IP address, which we hash for rate limiting (see above) and never store in our database. We don't look up http sites, IP addresses, intranet or local names, or anything in a private/incognito window.
- “Analyze Now” sends the site address to our API: the domain, plus the page path only when it looks like a terms page. Query strings, fragments and login details are removed first, and the exact text that will be sent is shown under the button. In a private/incognito window the address is still sent if you click Analyze Now; we just don't remember the analysis in progress afterwards.
- “Use this page's text” (shown when a site blocks our crawler) copies the visible text of your current tab into the box, locally, including anything personal that happens to be on that page. Use it only on the Terms page. Nothing is sent until you click “Analyze”; then only that text and the site root (
https://domain/) leave your browser. We reject text that doesn't read like a terms document, and the resulting page is labelled as based on user-submitted text. - Local storage. The extension keeps, in your browser only: the provider index; a one-hour cache of public rating data for sites you looked up (which reveals those sites to anyone with access to your browser profile); and, while an analysis runs, its id and domain. All of it expires or clears on its own. Removing the extension deletes it immediately.
No account, no key, no telemetry. The extension holds no credential and sends no identifier, usage data or crash reports. It reads public data from the same endpoints our website uses. Versions before 1.0.4 registered an agent API key on install; 1.0.4 and later delete any such key from your browser on update and never create one.
AI processing. When you click “Analyze”, the full TOS document text may be sent to Anthropic's Claude API for processing. See the Anthropic Claude entry in the third-party services table above for details on how Anthropic handles this data.
Data retention
Email: Stored until you unsubscribe. When you unsubscribe, we remove your email from our database and unsubscribe you from our email provider. If you never confirm a subscription, the pending record is deleted after 7 days.
Votes: The rating itself is kept indefinitely as part of the public score. The salted IP hash stored with it is replaced with a random token 90 days after the vote (plus a few days in database backups); from then on the vote cannot be linked to anyone.
Submitted URLs and analysis: Extracted clause excerpts, AI-generated commentary, ratings, plain-language summaries, and change summaries are stored indefinitely in our database as part of our public commentary archive. AI-generated outputs are stored in our database and displayed on our website, but are NOT stored on the blockchain. Full TOS document text is retained for change detection: the current version while it stays current, and a superseded version for 30 days after it is replaced. During analysis, document text is sent to Anthropic for AI processing; Anthropic may retain this data per their own privacy policy. Cryptographic hashes of the full document are retained permanently.
Analysis requests: We keep a record of each analysis request (the stripped site address, domain, status and the provisional preview) for 30 days, so you can resume an analysis and so we can fix failures. Failed requests appear in a weekly internal report emailed to us. Records older than 30 days are deleted automatically every night.
Blockchain records: Only cryptographic hashes, timestamps, the provider name and domain, the stripped address of the terms page, and verification status. No AI-generated text or copyrighted content. Records are permanent and cannot be deleted, modified, or corrected.
Agent API keys: Stored while the key is active. You can request deactivation and deletion of your key by emailing us. Agent opinions remain on the site as public data.
Server logs: Automatically rotated and deleted on a rolling basis by our hosting provider.
Cookies
We set no cookies. None: no session cookies, no analytics, no advertising. The site keeps one small item in your browser's local storage, the id of an analysis you started, so the page can show its progress if you come back; it never leaves your device and identifies nothing about you. Because we do not track you, there is nothing for a Do Not Track browser signal to disable.
Your rights
Regardless of where you live, you have the right to:
- ✓Access - Ask us what data we have about you
- ✓Delete - Request deletion of your email and any associated data
- ✓Object - Tell us to stop processing your data
- ✓Portability - Receive your data in a structured format
Since we collect so little, in most cases there's almost nothing to return. But the right is yours regardless. We aim to respond to all data requests within 30 days.
California residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:
- Right to know. You can request the categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to delete. You can request deletion of your personal information (subject to certain exceptions).
- Right to opt out of sale. We do not sell or share your personal information. We never have and have no plans to. There is nothing to opt out of.
- No discrimination. We will not discriminate against you for exercising your CCPA rights.
To exercise these rights, email hello@crazytos.com. We will verify your identity before processing your request and respond within 45 days as required by law.
Do Not Sell or Share My Personal Information
CrazyTOS does not sell or share personal information as defined by the CCPA/CPRA. We never have and have no plans to.
European visitors (GDPR)
If you are in the European Economic Area, the UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal basis. We process personal data based on legitimate interest (operating the service, preventing abuse) and consent (newsletter subscriptions).
- Right to rectification. You can ask us to correct inaccurate data.
- Right to restriction. You can ask us to limit how we process your data.
- Right to lodge a complaint. You have the right to file a complaint with your local data protection authority.
For GDPR requests, email hello@crazytos.com. We aim to respond within 30 days.
Changes to this policy
Same rule as our Terms: if we make meaningful changes to this policy, we'll post a notice on the site. No silent changes. No “by continuing to use” nonsense.
If something goes wrong
In the unlikely event of a data breach, we will notify the relevant authorities within the time the law sets (72 hours of becoming aware, under GDPR and UK GDPR) and affected users without undue delay, and in any case within 30 days. We will also post a notice on the site. We collect very little personal data, which limits the potential impact of any breach.
Children's privacy
CrazyTOS is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
Contact
Privacy questions or data requests? Email us at hello@crazytos.com.
Longview Labs LLC
2261 Market Street #4945
San Francisco, CA 94114
International visitors
Our services are hosted in the United States, and so are the processors listed above. If you visit from the EU, the UK or anywhere else, your data is transferred to and processed in the United States. Our processors provide transfer safeguards under their own data processing terms (Standard Contractual Clauses, or certification under the EU-US Data Privacy Framework where they hold it). We do not direct our services at the EU or UK specifically.
Governing law
This privacy policy is governed by the laws of the State of Delaware, United States, consistent with our Terms of Service. For California residents, applicable provisions of the CCPA also apply. For European visitors, applicable provisions of the GDPR also apply.
If any part of this policy is found to be unenforceable, the rest remains in full effect.
Version 3.0 - October 27, 2026
Truth-corrected to match the code. Votes: the salted IP hash is stored with each vote and scrubbed after 90 days (it was described as expiring within an hour and unlinked from votes; neither was accurate). Analysis text sent to Anthropic is up to 100,000 characters, not 50KB. Document retention is the current version plus 30 days for a superseded one, and pasted text is retained like fetched text. Unconfirmed subscriptions are deleted after 7 days. The cookie section now says plainly that we set no cookies. Breach timing follows the law (72 hours to authorities under GDPR, users without undue delay). International transfers name the safeguards. Jina's entry says exactly what it receives. Previous version: 2.9 (October 24, 2026), which described extension 1.0.5 (daily provider index refresh, incognito handling, what local storage reveals), states that the stripped terms-page address is part of on-chain records, adds the 30-day retention of analysis requests, the weekly internal failure report, the user-submitted-text label, and described IP hashing as pseudonymous rather than anonymous. Previous version: 2.8 (October 23, 2026), which updated the browser extension disclosure for extension 1.0.4: no API key is created or stored, page addresses are stripped of query strings before being sent, the paste fallback reads page text only on request, and domain lookups against our API are described. Previous version: 2.7 (October 18, 2026), which Added Typesafe (Jev) as a clause-classification processor and described the provisional “first read” shown during analysis. Previous version: 2.6 (April 9, 2026), which added the browser extension disclosure: auto-registration of API keys, AI processing via Anthropic Claude when Analyze is clicked, and local storage details.