Privacy Policy
Last updated: August 31, 2026
1. Introduction & Scope
Welcome to CodePocket (“we”, “our”, or “us”). CodePocket is a modern, production-grade cloud developer workspace and execution environment designed to help developers write, run, debug, and manage code seamlessly from anywhere.
We believe privacy and developer transparency are fundamental. This Privacy Policy explains what personal and technical data we collect when you use CodePocket (including our web editor, API, worker runtime, and dashboard), how that data is processed, and your rights regarding your code, projects, and personal data.
2. Information We Collect
We collect only the minimum necessary information required to provide reliable workspace and execution services:
Account and Authentication Data
When you create an account, sign in via email, or use third-party OAuth providers (such as GitHub or Google), we receive your email address, display name, and public profile avatar. Passwords for direct accounts are cryptographically hashed using salted bcrypt and never stored in plain text.
Workspace Projects and Code Files
Your project files, directory structures, source code, and configurations are stored in your private database workspace. Your code is strictly private to your account unless you explicitly choose to share a project or push to a public GitHub repository.
Execution Logs & Telemetry
When code is executed in the workspace sandbox, execution metrics (such as CPU runtime, memory usage, exit codes, and stdout/stderr) are processed to display your runtime output and execution history.
3. Code Execution & Sandboxing
When you click Run in CodePocket, your code is dispatched to our isolated execution engine:
- Ephemeral Sandbox Isolation: Code executions run inside ephemeral, strictly isolated worker sandboxes with restricted network access, strict memory ceilings, and execution timeouts.
- Transient Execution: Once the execution finishes, the ephemeral execution context is immediately torn down.
- No Model Training On User Code: We do not sell, license, or use your proprietary source code to train AI models or public datasets without your explicit consent.
4. Local Storage & Draft Persistence
To provide instantaneous editing without network lag and prevent accidental data loss during network disruptions, CodePocket uses your browser's localStorage to store local unsaved drafts.
These drafts remain exclusively in your browser and are synced to the cloud whenever you save or when autosave is triggered. You can clear your local drafts at any time through your browser settings or editor preferences.
5. Third-Party Integrations
CodePocket interacts with select third-party service providers to deliver database storage, authentication, and code synchronization:
6. Data Security & Retention
We employ industry-standard technical and organizational security measures:
- End-to-end HTTPS/TLS encryption for all in-transit web and API communications.
- Encrypted storage for sensitive secrets and OAuth tokens.
- JWT-based session authentication with expiration tokens and secure HTTP headers.
- Isolated containerized micro-sandboxes to prevent cross-tenant memory or filesystem leakage.
We retain your project data for as long as your account remains active. If you delete a project or request account deletion, all associated files and project records are permanently purged from active databases.
7. Your Rights & Data Portability
Regardless of your location, you have complete control over your code and personal data:
- Access and Export: You can export and download your code files, projects, and execution history at any time or push them to GitHub.
- Correction: You can update your account profile and display name via your dashboard.
- Deletion: You can delete any workspace project immediately or request full account termination.
9. Contact Us
If you have questions, feedback, or privacy concerns regarding CodePocket or this Privacy Policy, please contact our team: