Crosswalk runs on your own computer, and what it holds stays there.

Crosswalk runs on your own computer and what it holds stays there. There is no account, no analytics, no crash reporting, no advertising, and no third-party code in the app that reports anything to anyone. Your terminals, and everything that appears in them, never leave your machine.

There are exactly two times anything leaves your computer, and both are below: the app asks whether a newer version exists, and, if you buy a licence, the payment goes through Stripe.

All of it is on your own disk, in your own user account. Crosswalk keeps its files in one directory, which differs by platform:

Three files live there.

crosswalk.db holds the things you set up:

• Your sessions: the name you gave one, the command it runs, its working directory, any environment variables you set for it, your notes, and counts of how much it has read and written.
• Your groups and layouts, and their names, colours and working directories.
• Your snippets: their titles, descriptions, and the text they paste.
• The last screen of each session, up to 256 KB of it, so that a session you restart comes back looking as it did rather than blank. This is terminal output, and it is written to your disk. It is never sent anywhere.

license.json holds when your trial started, the furthest date the app has seen, and your licence key once you enter one. The key contains the email address it was issued to, which is how Settings can show who it belongs to.

settings.json holds your preferences: the theme, your keyboard shortcuts, your notification choices, and the other switches in Settings. It describes the app, not you.

One file is kept outside that directory:

It holds the same two trial dates a second time, so that reinstalling does not silently start a new trial. It is left behind if you delete the app. You can delete it yourself; it is plain text and holds nothing else.

Two things worth knowing about the database:

• Environment variables you set for a session are stored in it as plain text. If you put a token or a password in one, treat the file the way you would treat any file holding a secret.
• Everything a terminal produces while it runs is held in memory and discarded when the session ends. Only the last screen is written to disk.

Crosswalk runs a small local service that owns the terminals. It listens on 127.0.0.1 only, on a port chosen by the operating system, and requires a token generated fresh for each launch. Nothing else on your network can reach it.

Each session is also told how to reach that service, through three environment variables it can read: CROSSWALK_SESSION, CROSSWALK_URL and CROSSWALK_TOKEN. That is what lets a program you run, such as an agent's stop hook, ask Crosswalk for a notification. It is the same loopback address and the same token, so this reaches no further than the app already does, and the request carries only the text the notification is to show.

Crosswalk asks https://releases.crosswalk.wareshq.com whether a newer version exists, about once a minute while it is running, and downloads it when there is one. That request carries what any HTTPS request carries, including your IP address. It contains nothing about you, your sessions, or what you run.

We do not enable access logging on that service (verified 2026-09-10), so we hold no record of who checked for an update or when. It is served by Amazon CloudFront and Amazon S3, which act as our infrastructure providers.

There is currently no setting to turn the update check off. If that matters to you, blocking that hostname is sufficient, and the rest of the app continues to work.

Payment is handled by Stripe. Your card details go to Stripe and never reach us. From a purchase we receive your email address, the country used to calculate tax, and the fact that you bought something.

We use your email address for two things: to send you your licence key, and to answer you if you write to us. Your key is stored alongside the payment record in Stripe so that we can send it again if you lose it. That is the whole record. There is no account, no password, and nothing to sign in to. The key is verified on your own machine, offline, so using Crosswalk never tells us that you are using it.

Everyone who handles any of this on our behalf:

We keep the invoices that tax law requires us to keep. We do not sell personal information to anyone.

No analytics. No telemetry. No crash reporting. No advertising, and no advertising identifiers. No profiling. We cannot read your terminals, your commands, your files, or your notes, because none of it is ever sent to us.

• To remove everything Crosswalk has kept on your computer: delete the directory in the first table above, and the trial.json file in the second.
• To see or remove what we hold about a purchase: email us. What we hold is your email address, your licence key, and the payment record in Stripe. We will delete what tax law does not require us to keep.
• To stop the update check: block releases.crosswalk.wareshq.com.

If you are in the EU, the UK, or California, you have the rights your law gives you over the small amount of data above: to see it, to correct it, to have it deleted, and to complain to your regulator. Ask, and we will do it.

Crosswalk is a developer tool and is not directed at children.

If this policy changes, the date at the top changes with it, and any material change will be stated in the summary at the top rather than only in the section it affects.

Email support at wareshq dot com.