Privacy Policy
Last updated: August 30, 2026. This policy explains what CrumAtlas (the web edition) collects, stores, and sends when you use it. It is written in plain language; the short version is up front.
The short version
CrumAtlas runs entirely in your browser. We do not store your conversations on our servers. When you sign in, CrumAtlas keeps a session token in your browser's local storage so the Profile panel can show who you are. When you send a message or attach a file, the conversation text and (if attached) the file contents are sent over HTTPS to a CrumWorld proxy, which forwards them to an AI provider to generate a reply. The proxy does not log the content of your messages.
1. What CrumAtlas is
CrumAtlas is the web edition of the CrumWorld companion app. It is a static site served over HTTPS that provides a chat surface backed by an AI model. CrumAtlas itself is not a service that collects personal information beyond what your browser already exposes to every website you visit.
2. Information we collect
The web edition collects and processes only what is needed to work:
-
CrumWorld account session. If you sign in, the
OAuth callback stores a session payload (your display name,
email, and avatar URL) in your browser's local storage under the
key
crumatlas_user_auth. This lets the Profile panel render your identity without asking you to log in again on every reload. You can clear it at any time by logging out or clearing site data. -
Theme preference. CrumAtlas remembers whether
you picked Light or Dark mode (stored under
appTheme) so the choice persists across visits. -
Conversation content you send. Your message
text, attached file contents, and any image you upload are sent
over HTTPS to the CrumWorld AI proxy
(
atlas.crumatlas.workers.dev) so a model can answer you. The proxy is the only network destination CrumAtlas talks to; it forwards the request to the model provider and streams the reply back to your browser. - Standard browser and network metadata. Like every website, CrumAtlas is delivered by a hosting provider (Netlify) and the AI proxy is delivered by Cloudflare Workers. Those services may record the request's IP address, user agent, and TLS metadata for security, rate-limiting, and abuse prevention. Their own privacy policies apply.
3. Information we do not collect
- We do not maintain a server-side history of your chats. Conversations live in your browser tab and disappear when you close it.
- We do not use third-party analytics, advertising cookies, or tracking pixels in the web edition.
- We do not ask for your name, email, or other personal details unless you sign in with your CrumWorld account.
4. How attachments are handled
When you attach a file, CrumAtlas reads it locally in your browser to extract a preview and, when possible, plain text. Images are downscaled in your browser to a small JPEG before being sent. Only the conversation payload (the extracted text, the image, or a notice that the file could not be converted) leaves your device. The proxy does not retain copies.
5. How the AI proxy works
The CrumWorld AI proxy is a thin Cloudflare Worker that holds the model provider's API key as an encrypted secret. Your browser sends only the conversation plus a short surface label; the proxy adds the system prompt, picks the model, and calls the provider on your behalf. The proxy enforces a per-isolate burst limit (about 30 requests every 10 seconds) to protect the service from abuse; it does not log conversation content.
6. Cookies and local storage
The web edition does not set tracking cookies. It uses your
browser's local storage for two things only: your CrumWorld
session (crumatlas_user_auth) and your theme choice
(appTheme). You can clear both by clearing site
data for this domain or by using the Log Out button in the
Profile panel.
7. Children's privacy
CrumAtlas is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has signed in with a CrumWorld account, contact us and we will work with you to address it.
8. Your choices and rights
- Sign out. The Log Out button in the Profile panel clears the session from local storage.
- Clear local data. Clearing site data for this domain removes the session, theme preference, and any in-tab conversation history.
- Stop a generation. While the model is answering, the send button turns into a Stop button; clicking it cancels the request and keeps whatever text has already arrived.
- Access, correction, deletion. Because we do not store conversation content server-side, there is nothing for us to delete. For account-level requests (the CrumWorld account that powers sign-in), please contact CrumWorld directly.
9. Security
CrumAtlas is served over HTTPS with a strict Content Security Policy that limits which origins can run code, load assets, and receive network requests. The AI proxy enforces a CORS allowlist so only approved origins can call it, and the model provider's API key is stored as an encrypted Worker secret rather than in the site bundle. No method of transmission over the internet is perfectly secure; if you have a concern, please contact us.
10. International use
CrumAtlas is provided globally by CrumWorld. The AI proxy runs on Cloudflare's network and the model provider may process requests in other regions. By using CrumAtlas you understand that your messages may be processed outside your country of residence to generate a reply.
11. Changes to this policy
We may update this policy as CrumAtlas evolves. The "Last updated" date at the top will reflect the current version. Material changes will be announced through the app or on crumworld.com.
12. Contact
Questions about this policy or about CrumAtlas can be sent to CrumWorld through the support channels listed at crumworld.com.