Privacy Policy

The short version

Codeology keeps your work on your own machines unless you choose otherwise. Your source code and the docs in your repositories stay there. Your account holds your profile, how you sign in, your plan, and counts of your activity. Docs reach our servers only for projects you choose to back up.

What stays on your devices

• Your source files, and the docs Codeology writes into each project's .codeology folder, unless you back that project up.
• Drafts, search indexes, and the data behind suggestions while you type.
• API keys for optional AI drafts, stored encrypted by your operating system.
• In the apps: your sign-in tokens (in the device's secure storage), copies of the docs you've opened so they can be read offline, and your reminder and theme choices. Signing out of an app removes its tokens and offline copies.

What your account stores

• Profile: display name, handle, optional headline, and whether your profile is public.
• Sign-in: your email, a salted password hash if you use a password, and which GitHub, Microsoft, or Google account you linked (its account name and an identifier from the provider).
• Where you're signed in: the browser, app, or IDE name, the device name an app reports, and when each was last used. We don't store your IP address with your account.
• Email choices: which optional email you receive, with a history of each change and where it was made.
• Activity counts: a connected IDE reports doc ids (such as doc_3f9a61c2), kinds, dates, and counts so we can compute XP, streaks, and achievements. Activity reports never include doc titles, code, or project names.
• Backed-up projects: only for projects you choose to back up: the project's name and description, and each doc's Markdown file, including the source excerpt saved in it.
• Bookmarks: the docs you save.
• Feed: the posts and comments you share, and the posts you like and save.
• Market: if you sell, the id and status of the Stripe account you're paid through (Stripe keeps your identity and bank details, not us), your listings and project files, and your sales. If you buy, your purchases.
• Jobs: the jobs you post and the applications you send, with their notes and portfolio links.
• App notifications: for each app install that allows notifications, the push address its platform gives it and when it was last seen, plus which kinds of notification you turned off.
• Plan and payments: if you subscribe to Premium, your plan, its renewal date, and the amounts paid. Stripe processes payments on the website; we never receive or store your card number. If you subscribe in the Android app, Google Play tells us the subscription's state, plan, renewal date, and purchase identifier, and we give Google Play a random id for your account (never your email) so the purchase only counts for you. If you subscribe in the Windows app, the Microsoft Store grants the subscription to your PC, and the app tells us which Codeology add-on it covers and when the period ends; the Store never tells us who you are there.

What other people can see

Your profile is private until you make it public. A project you publish, including its source excerpts, can be read by anyone with the link, and its docs appear in Codeology search. Posts, comments, market listings, and job posts are public, with your display name and handle. When you apply to a job, the employer sees your note, your profile, and your email address. When you buy, the seller sees your display name. Everything else stays private to you.

How we use it

Only to run Codeology: signing you in, keeping your account secure, showing your profile, docs, and posts as you choose, billing Premium, paying sellers, and sending the email and notifications you ask for. The feed's For you view ranks posts using the tags and languages of your backed-up docs and of the posts you like, save, and buy, and the people you follow; this happens on our server and isn't shared. We don't sell your information and we don't use your docs to train AI models.

Advertising

Accounts on Premium never see ads. Signed-out visitors and free accounts may see Google AdSense ads beside docs, in search results, and on the feed and market, and free accounts may see a Google AdMob banner in the Android app's reader and search. Google may use cookies or the device's advertising ID to show and measure those ads, and in the EEA, the UK, and Switzerland it asks for your consent first. We don't give Google your account details, your docs, or your code. The IDE extensions and the Windows app show no ads. Learn how Google uses this information at policies.google.com/technologies/partner-sites.

Email

Account email — sign-in codes, password resets, new sign-in and new device alerts, and plan notices — is always sent because it protects your account. Optional email (the monthly digest, documentation tips, and product news) is only sent after you turn it on, and every message has a one-click unsubscribe link.

Notifications

The daily streak reminder is scheduled on your device. If you allow notifications, the apps also tell you about sales, job applications, and likes and comments on your posts: we send those through Firebase Cloud Messaging (Android) or Windows Push Notification Services, which receive the notification's text and your device's push address. Turn each kind off in notification settings, or remove a device there.

Cookies

• Sign-in: keeps you signed in on the website; removed when you sign out.
• Known browser: a random value that lets us email you when your account is used from a new browser.
• Theme: remembers light or dark mode if you choose one.
• Advertising: on pages that show ads to signed-out visitors and free accounts, Google may set its own cookies, as described under Advertising.
• Short-lived security cookies: protect forms and provider sign-ins, and carry a message across one page load.

Who else is involved

• Email delivery: messages are sent through our Google Workspace mail account.
• Payments: Stripe processes Premium and market payments and receives the payment details you enter, under its own privacy policy. Sellers give Stripe their identity and bank details directly to get paid.
• App store billing: Google Play and the Microsoft Store process Premium bought in the Android and Windows apps, under their own privacy policies.
• Ads: Google AdSense and AdMob show ads to signed-out visitors and free accounts.
• Push notifications: Google Firebase Cloud Messaging and Microsoft Windows Push Notification Services deliver app notifications.
• Sign-in providers: if you choose GitHub, Microsoft, or Google, that provider tells us your account's email and name under its own privacy policy.
• App stores: if you install an app from the Microsoft Store or Google Play, the store handles the download under its own policy.
• Hosting: Codeology runs on servers operated by Picasso Rayne Studios LLC in the United States.

How long we keep it

• Your account data, until you close your account. Closed accounts are erased 30 days later, and daily backups containing them roll off 14 days after that.
• Backed-up docs, until you stop backing up the project or your account is erased.
• Records of paid invoices (amount, date, and plan), for as long as tax and accounting rules require. Once your account is erased they're no longer connected to it.
• Codes and reset links expire within minutes and are removed within a day. Sent email is removed after 7 days. Records of sign-ins that ended are removed after 30 days.

Your choices

• Change your email choices, sign out any device, or unlink a provider from your settings at any time.
• Publish, unpublish, or stop backing up any project from its page.
• Change or cancel Premium from Plan and billing, or in Google Play or your Microsoft account if you bought it in an app.
• Download everything stored for your account, including backed-up docs, from Data and privacy.
• Close your account from Data and privacy; closing stops Premium from renewing, and you can restore the account within 30 days.

Security

Passwords and sign-in tokens are stored only as hashes, every connection uses HTTPS, and each place you're signed in can be signed out from your security settings.

Children

Codeology isn't directed to children under 13, and we don't knowingly create accounts for them.

Changes and contact

If this policy changes in a way that matters, we'll tell you by email before it takes effect. Questions or requests about your data: support@picassoraynestudios.com.

By mail: Picasso Rayne Studios LLC, 4450 Township Dr Unit B, Oakwood, GA 30566.