Privacy

Who we are

Crayfish Pvt Ltd, at thecrayfish.tech. For anything in this policy, write to contact@thecrayfish.tech.

This website

The site collects only what you type into the "Ask a question" and "Start a project" forms: the fields you fill in and, on "Start a project", an optional file (up to 10 MB). We use it to read your message and reply to you.

Each submission is sent to Crayfish as an email through Resend, our email provider. The email stays in our inbox until we delete it.

To keep spam out, the form service also keeps a log of every submission on its own server at thecrayfish.tech. For each one it records the time, which form, the reference number, your name, email address and message (and the other answers you gave), the country your connection comes from, whether it was emailed to us or is waiting for us to check it (and why), and your IP address. The IP address is deleted from the log after 30 days, and the space it took on disk is overwritten. The log is not copied into any backup, so no older copy of an IP address is kept anywhere else. If you attach a file, the log keeps only its name and size, except while a submission waits for us to check it (below). Only Crayfish can read the log.

The spam checks run on our server and use no outside service: how quickly the form was filled in (the page asks the server for a signed, single-use time when a form opens), whether the name looks made up, whether the email address is from a throwaway mail service, and the country of the IP address (while we only work with clients in the Maldives). No submission is thrown away by these checks: if one of them flags yours, it is kept in the log, with its file, and not emailed until a person at Crayfish looks at it and either answers it or deletes it. To limit spam the service also counts submissions per visitor address in memory for ten minutes, then forgets them.

The country comes from a list of IP address ranges that ships with the service, so no one else is asked. IP geolocation by DB-IP, used under the Creative Commons Attribution 4.0 licence.

The site sets no cookies and has no analytics or advertising trackers. Every page, font, script and image is served from thecrayfish.tech itself; your browser makes no requests to other companies when a page loads. Our server sees your IP address and browser details for each request, as for any website.

Your browser remembers two small things for you, in its own storage on your device: the colour theme you picked (light, dark or automatic) and that you have seen the opening logo animation in this visit. Neither is sent to us.

Crayfish backups (Google sign-in app)

"Crayfish backups" is a Google sign-in app used only by Crayfish, to save encrypted backups of its own apps (Review and DIGU) to Crayfish's own Google Drive. It is not offered to the public and is not used to collect data about other people.

• It asks for Google's drive.file permission, which lets it see and manage only the files it created itself. It cannot see anything else in the Drive.
• It does not read, share or sell anyone's other Drive data.
• Backups are encrypted before they are uploaded.
• Crayfish's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Deletion and questions

To have a message you sent through the website deleted (from our inbox and the form log), or to ask what we hold about you, email contact@thecrayfish.tech and we will delete it and confirm. You can also revoke the Crayfish backups app's access at any time in your Google Account under Security, then third-party access.

If this policy changes, the date at the top changes with it.