Security

PII Crawler scans all data locally and can be used in an air-gapped environment. Scan data is never sent remotely. And, it doesn't make network calls with the exception of a one-time license registration and crash/error reporting. This makes PII Crawler suitable for high-security or compliance-bound environments.

Access Control

The scanner only requires access to the files it scans—no root or unnecessary system permissions. Users can choose exactly which folders or file types to scan, reducing accidental access to irrelevant data.

External Services & Data Sent to Eligian

PII Crawler communicates with Eligian servers in the following limited circumstances. Scan data, file contents, and PII findings are never transmitted.

License Registration (One-Time)

When you register your copy of PII Crawler, the following is sent to api.eligian.com:

• Your email address (for verification and license delivery)
• Product identifier ("piicrawler")
• Operating system (e.g., "darwin", "windows", "linux")
• CPU architecture (e.g., "amd64", "arm64")

This occurs only during the initial registration process.

Version Checking

PII Crawler periodically checks for available updates by fetching a JSON file from downloads.eligian.com. This request contains no user data—it simply retrieves the latest version number.

Error Reporting

If an unhandled exception occurs, PII Crawler may send error information to Eligian to help improve the product. This includes:

• Exception message
• Exception class name
• Stack trace

Error reports do not contain scan results, file paths, or any PII discovered during scans.

Client-Side Analytics

The web interface loads a lightweight analytics script from api.eligian.com to understand feature usage patterns. This helps prioritize development efforts. No scan data or PII findings are included in these analytics.