Cookie Policy

Last updated August 5, 2026

This policy explains the browser storage, website analytics and advertising measurement used on crustapi.com. Our Privacy Policy explains how we handle account data.

1. Scope

This policy covers the website at crustapi.com, including the marketing pages and the dashboard where you sign in and manage your account.

This policy is about cookies and browser storage only. How we handle your personal data more generally, including account data, billing records, and usage metadata, is described in our Privacy Policy.

CrustAPI is a business-to-business service. It is not a consumer service, and it is intended for business or professional use.

2. What cookies and local storage are

A cookie is a small text file that a website asks your browser to store on your device. The website can read that file back on later visits. Cookies are commonly used to keep you signed in, remember settings, or track your activity across sites.

A first-party cookie is set by the website you are visiting. A third-party cookie is set by a different company whose code runs on the page, for example an advertising or analytics network.

A session cookie is deleted when you close your browser. A persistent cookie stays until it expires or you delete it.

Local storage is a related browser mechanism. Like a cookie, it lets a site save small pieces of information in your browser. Unlike a cookie, that information is not automatically sent to a server with every request. It just stays in your browser until it is cleared. We use local storage instead of cookies for the two items described below.

3. Our approach

We use Vercel Web Analytics and Speed Insights for aggregate page views and load timings. Some marketing pages also load Google Ads tags for campaign and conversion measurement. Google Ads storage and advertising settings follow the consent configuration on those pages; these are separate from our own signup attribution.

When you sign up, we may record the first page observed during your signup journey, the referring website's domain, campaign source, medium and name, and whether an advertising click parameter was present. We do not retain the full referring URL, search query or advertising click ID in this record. We use this context with account verification, API usage and purchase records to understand which channels bring customers. Missing context remains unknown.

We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising.

When you sign in to the dashboard, we use your browser's local storage for two limited purposes. Those are described in the next section.

4. What we do use: strictly necessary and functional local storage

We use local storage for sign-in, dashboard preferences and the existing page or campaign tag (crust_ref). The tag stays until browser storage is cleared. The separate signup-journey context uses navigation state and temporary internal-link parameters, valid for up to eight hours. It creates no cookie or visitor ID and is not carried between separate visits. The destination page removes its temporary parameter from the visible URL.

5. Third parties during payment

We use a third-party provider to process payments. When you make a purchase, checkout runs on that provider's own hosted pages. They may set their own cookies there to process the payment and prevent fraud.

Those cookies are set by our payment provider and are governed by their own policies, not by this policy. They are not set by crustapi.com.

6. How to manage or clear cookies and local storage

You can view and clear cookies and local storage through your browser settings. Most browsers let you clear stored site data, block cookies, or clear everything for a specific site. Check your browser's help pages for the exact steps.

If you clear crustapi_token or clear your browser storage, you will be logged out of the dashboard and will need to sign in again. If you clear crustapi_autoreload, your auto-refresh preference resets to its default.

Browser settings let you block scripts and clear cookies or local storage. Blocking storage can affect sign-in and saved preferences. The signup-journey capture is disabled when your browser sends Global Privacy Control or Do Not Track. This does not change the separate Google Ads configuration. Contact support@crustapi.com about attribution linked to your account.

7. Changes to this policy

We may update this Cookie Policy from time to time. If a change is material, we will notify you through the site or by email.

The date at the top shows when this policy was last updated. If you continue to use crustapi.com after an update, that means you accept the updated version.

8. More information and contact

For how we handle personal data more broadly, see our Privacy Policy.

If you have questions about this Cookie Policy, email us at support@crustapi.com.

CrustAPI is not affiliated with, endorsed by, or sponsored by Google. Google is a trademark of Google LLC.