Privacy Policy

1. Information we collect

• Account data: your email address and a securely hashed password (we never store your password in plain text).
• Usage data: obfuscation metadata (language, preset, input/output size, timestamps) used for quotas, billing and abuse prevention.
• API keys: your personal key, used to authenticate programmatic requests.
• Payment data: handled entirely by our payment provider, Creem. We do not receive or store your full card details.
• Technical data: IP address and request headers, processed transiently for security and rate limiting.

2. Your source code

Code you submit is processed in memory to produce your obfuscated result and returned to you. We do not sell it, and we do not retain your uploaded source beyond what is necessary to fulfil the request. We store only non-sensitive usage metadata (not your code contents).

3. How we use information

To provide and secure the Service, authenticate you, enforce plan limits and billing, prevent abuse, and communicate about your account. We do not use your code to train models.

4. Cookies

We use a single essential, httpOnly session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

5. Third parties

• Creem — payment processing and subscriptions.
• Cloudflare — CDN, TLS and DDoS protection.
• Our hosting provider — runs the application server.

These providers process data only to deliver their part of the Service.

6. Data retention & security

We keep account and usage data for as long as your account is active or as required by law, then delete or anonymise it. We apply industry-standard measures (hashing, TLS, access controls). No system is perfectly secure; we cannot guarantee absolute security.

7. Your rights

You may access, correct or delete your account data, and request export, by emailing us. Deleting your account removes your associated personal data, subject to legal retention obligations.

8. Contact

Privacy questions or requests: support@codemask.io.