What you do here
stays here.
Every outbound connection Crumb makes, listed plainly. If a connection isn't on this list, it isn't happening.
The Rule
Crumb runs on one rule: what you do here stays here. Your code, your sessions, your projects . none of it leaves your machine unless you explicitly initiate a connection (like running a Claude Code session). The Ledger is generated and stored entirely on your Mac. It never goes anywhere.
At launch
| What | Where | Why |
|---|---|---|
| License refresh | https://license.getcrumb.app/activate |
Called once at activation, then once every 6 days to extend your JWT. Sends only your license key and a machine fingerprint. Never includes project content, session data, or anything you have built. |
| Update check | https://license.getcrumb.app/version |
Called at launch to check whether a newer version is available. Sends only the current version number. No identifiers of any kind. |
While the app is open
| What | Where | Frequency | What is sent | What is received |
|---|---|---|---|---|
| Account usage mirror | https://api.anthropic.com/api/oauth/usage |
Every 60 seconds while the app is open | Only your existing Claude login token (read from macOS Keychain, never stored or logged by Crumb) | Usage percentages and reset timestamps. No project content, no machine identifiers |
When you run a Claude session
| What | Where | Why |
|---|---|---|
| Claude inference | api.anthropic.com (via the claude CLI you installed) |
Your prompts. Anthropic's domain, not ours. We never see or proxy this traffic. It goes directly from your machine to Anthropic. |
When you buy or activate
| What | Where | Why |
|---|---|---|
| Stripe Checkout | checkout.stripe.com (your browser, not the app) |
The purchase. Zero PCI scope in our code. Stripe handles payment. We handle delivery. |
| License activate | https://license.getcrumb.app/activate |
Issues you a signed license token. Only your email address and a machine fingerprint go up. No project content, no session data. |
What we never do
- We never send your prompts, code, or session content anywhere except Anthropic . and only when you press Enter.
- We never run analytics, telemetry, A/B tests, or growth tracking of any kind.
- We never store anything on a server you didn't explicitly purchase access to.
- We never read your filesystem outside the project folders you explicitly open in Crumb, plus
~/.claude/. - The Ledger is generated and stored entirely on your machine. It is never sent anywhere.
How to verify
Every endpoint listed above is grep-able in our source code. If you find an outbound connection that isn't on this list, that's a serious bug. Email info@theeditorialedit.com with the connection details. We'll investigate and fix it.
This pledge is not a legal document designed to be survived. It's a plain-language commitment, written to be understood. If something here is unclear, ask.
Contact
The Editorial Edit
info@theeditorialedit.com
Last updated: May 2026. The Quiet Pledge version matches the app version it ships with. Changes are noted in the changelog.