What we use and why

• Wallet data (private keys): Wallet private keys are encrypted and stored client-side in the browser (local storage). Your Kromer private key is only ever sent to the official Kromer API.
• Krawlet API usage data: We collect minimal logs of API requests for security and abuse prevention. This may include request metadata such as timestamp, IP address, endpoint accessed, or the API key used. These logs are automatically deleted after 7 days.
• Infrastructure data: We use third-party hosting and infrastructure providers (Vercel, Cloudflare, and others) that may process data necessary to operate the service, such as server logs or analytics. We do not control these providers' data practices.
• Cookies and local storage: The Krawlet frontend uses local storage instead of cookies for client-side data, including wallet data and settings. Transactions, addresses, and names are also cached inside IndexedDB for performance. We do not use cookies for tracking or advertising purposes.
• Other data collected: Krawlet API acts as an aggregator and proxy for Shopsync shop/listing data, player-to-Kromer address mappings, known address metadata, and Shopsync report/change logs (for example validation failures, successful posts, and shop/item/price changes).