Privacy Policy

Last updated 5 November 2026

In short: the app has no telemetry, analytics or ads. From version 0.1.32, Free and Pro both need an account, which shares the minimum needed to confirm your plan. Otherwise the app talks only to the data sources you add.

What stays on your computer

• Connection profiles, query tabs, drafts, workspace, history and cached schema metadata are stored in %APPDATA%\DataCraft Studio.
• Database passwords, API keys, AI provider keys and any Pro sign-in session are stored in Windows Credential Manager.
• Interface preferences are stored in your local Windows profile.

None of this is uploaded to DataCraft.

What the app sends, and to whom

The data sources you configure

Queries and metadata requests go directly from your computer to the databases, search clusters and files you connect to. DataCraft has no server in between.

The account service

From version 0.1.32, every plan needs a sign-in. Earlier versions need it only for Pro. It uses an account service operated by Auth0 (Okta). Sign-in happens in your web browser, so the app never sees your password. The account service stores:

• your email address, name and whether your email is verified;
• your plan (Free or Pro) and, if it has one, the date your Pro plan ends;
• an anonymous device identifier, which is a one-way hash of a random ID created on your computer;
• for Pro licenses, when each device was first and last seen and when a license moved between devices.

This is used to enforce one Pro license per person. Your databases, queries, results and connection details are never sent.

Account administration: we can see the details above to manage plans and support accounts, and we can block an account that breaks the license terms. We also keep a record of sign-in activity for accounts: the time, the result (for example a successful or failed login), the sign-in method and app, and the IP address. We use it to protect accounts, investigate misuse and help with support. IP addresses are removed from our copy after 90 days, and the rest is kept until you ask us to delete your account data. Earlier versions used without an account are never recorded, because no sign-in takes place. Auth0 also keeps its own logs under its privacy terms.

Support requests, only if you send one

What you write in Help & Support, and any images you attach, go to our own server so we can reply, with your email address, account ID and app version. We keep the conversation until you ask us to delete your account data. Please don’t include passwords or customer data, and check images before you attach them.

The AI assistant, only if you use it

The AI assistant sends your prompt, and the context you choose to include, directly to the model provider you configure, using your own API key. That provider’s privacy terms apply. DataCraft does not see or relay it.

Update checks

From version 0.1.32, every install fetches a small notice from our website about once an hour, to learn whether its version needs updating. The request carries no account or device details, and we don’t log it. Verified Pro installs also check GitHub about once a day for a new version. Other installs contact GitHub only when an update is recommended or required. As with any web request, GitHub receives your IP address.

This website

• Server logs: the web server records each request, including IP address, browser details, page and time. Logs are normally deleted after about 14 days.
• Visitor counts: we use those logs to produce totals for page views, visitors, download clicks, referring sites and countries. Countries are looked up on our own server. The totals we keep contain no IP addresses. The public pages use no cookies, and this site uses no third-party analytics. The private administrator pages under /admin use a sign-in cookie for administrators only.
• Waitlist: if you join the waitlist, we store your email address, what you’re interested in and the date. We use it only to tell you when that product is available, and we don’t share it. To be removed, open a request with your email partly hidden, and we’ll work with you to confirm it.
• Theme choice: your light or dark choice is saved only in your browser.
• Downloads and public issues: the installer and public issues are hosted by GitHub, whose privacy terms apply. Issues are public.

Your choices

• Sign out from your profile to remove the local sign-in data from this computer.
• To delete your account data, open a request with your email partly hidden, for example s****@example.com. Don’t post your full email address.
• To remove local data, uninstall the app, delete %APPDATA%\DataCraft Studio, and remove the DataCraft entries from Windows Credential Manager.

Changes

If this policy changes, the new version will be published on this page with a new date.