What you do here
stays here.
Every outbound connection Crumb makes, listed plainly. If a connection isn't on this list, it isn't happening.
The Rule
Crumb runs on one rule: what you do here stays here. Your code, your sessions, your projects . none of it leaves your machine unless you explicitly initiate a connection (like running a Claude Code session). The Ledger is generated and stored entirely on your Mac. It never goes anywhere.
At launch
| What | Where | Why |
|---|---|---|
| License verify | https://license.getcrumb.app/verify |
Confirms your paid status. Once per launch, then every 24 hours. Never includes project content. |
| Update check | https://api.github.com/repos/.../releases/latest |
10 seconds after launch, polled once to check for new versions. Never includes anything except the current version string. |
When you run a Claude session
| What | Where | Why |
|---|---|---|
| Claude inference | api.anthropic.com (via the claude CLI you installed) |
Your prompts. Anthropic's domain, not ours. We never see or proxy this traffic. It goes directly from your machine to Anthropic. |
When you buy or activate
| What | Where | Why |
|---|---|---|
| Stripe Checkout | checkout.stripe.com (your browser, not the app) |
The purchase. Zero PCI scope in our code. Stripe handles payment. We handle delivery. |
| License activate | https://license.getcrumb.app/activate |
Issues you a signed license token. Only your email address and a machine fingerprint go up. No project content, no session data. |
What we never do
- We never send your prompts, code, or session content anywhere except Anthropic . and only when you press Enter.
- We never run analytics, telemetry, A/B tests, or growth tracking of any kind.
- We never store anything on a server you didn't explicitly purchase access to.
- We never read your filesystem outside the project folders you explicitly open in Crumb, plus
~/.claude/. - The Ledger is generated and stored entirely on your machine. It is never sent anywhere.
How to verify
Every endpoint listed above is grep-able in our source code. If you find an outbound connection that isn't on this list, that's a serious bug. Email info@theeditorialedit.com with the connection details. We'll investigate and fix it.
This pledge is not a legal document designed to be survived. It's a plain-language commitment, written to be understood. If something here is unclear, ask.
Contact
The Editorial Edit
info@theeditorialedit.com
Last updated: May 2026. The Quiet Pledge version matches the app version it ships with. Changes are noted in the changelog.