Privacy
cruft.sh is a documentation and marketing site for an open-source project. It has no accounts, no sign-in, no analytics, and no advertising. We collect as little as possible, and we do not sell or share your data. This page explains what that means in practice.
What we do not collect
There are no user accounts on cruft.sh, so we do not ask for or store your name, email, or password. We do not run analytics or tracking scripts, we do not set advertising or tracking cookies, and we do not build a profile of you or share one with anyone. There are no forms on the site that submit data to us; the only way you contact us is by choosing to send an email.
Server logs
Like almost every website, our hosting provider records standard server request logs: the requesting IP address, the page requested, a timestamp, and the browser's user-agent string. These logs exist to keep the site running, diagnose errors, and protect against abuse. They are retained for a short period and are not used to identify or track individuals.
Cookies and local storage
cruft.sh does not set tracking cookies. The site uses your browser's localStorage for a single purpose: to remember your light or dark theme choice, so the site looks the way you left it. That value never leaves your browser and is not sent to us.
Third-party content
To render the site, your browser loads a small number of assets from third parties: web fonts from Google Fonts and the htmx library from the unpkg CDN. When your browser fetches those files, the provider necessarily sees the request, subject to its own privacy policy. We do not send them any additional information about you.
Installing Cruft (via curl | bash or npm) downloads release binaries from the npm registry. Those downloads are handled by npm and are covered by npm's privacy policy, not this one.
Contacting us
If you email us at [email protected], we keep that correspondence so we can respond and follow up. We use it only for that purpose. See the contact page for the ways to reach us.
Questions about privacy can go to the same address.
cruft.sh is operated by Frist Development, LLC. This policy may be updated from time to time; the version you are reading was last updated on August 25, 2026.