Privacy

Data we collect

This includes:

• Account: your name, email and a hash of your password, plus the IP address used at sign-up, which we keep to prevent abuse.
• Account activity: how you first reached the site (the referring site or campaign tag, and the first page you visited), the time of your last activity, and the domains you look up while signed in (on the site, the API or the MCP server), which we keep for 180 days. We use this to understand and improve how the service is used.
• Social sign-in: the provider's account id, your name, email and avatar, and the OAuth tokens it issues.
• Payments: a Stripe customer reference and the brand and last four digits of your card. We never store card numbers.
• Sessions and logs: a session cookie keeps you signed in; our servers' access logs record IP addresses and browser user agents for security and are rotated regularly.
• Crawl data: the technologies detected on websites and the contact email addresses published there, described under Crawl exclusion below.

Cookies

We use strictly necessary cookies for authentication and CSRF protection. Your session also remembers how you first reached the site, so we can record it if you create an account. We do not use third-party advertising cookies.

GDPR contact

Reach out at privacy@larger.io for any data access, rectification, or deletion request. We respond within 30 days.

Crawl exclusion

Our crawler reads publicly accessible pages of a website: its home page and a few linked pages such as contact, about and legal pages. It records the technologies it detects and the contact e-mail addresses published there. These addresses can appear in exports. Email crawler@larger.io to have your domain removed from the public index and from exports.