Privacy Policy

About this policy

This Privacy Policy describes how Andrew Schmitz, operator of freecode ("freecode," "we," or "us"), collects, uses, and discloses information in connection with our website, applications, and related services. Our Terms of Service govern use of the service.

How we use information

We process information to provide and maintain freecode, administer accounts, fulfill requests, communicate with you, provide support, and improve the service. This includes diagnosing errors, investigating failures, evaluating performance, developing features, and analyzing usage. Authorized personnel and automated systems, including agents, may review relevant sessions and records for these purposes.

We also process information to protect the service, prevent fraud and misuse, enforce our terms, comply with legal obligations, and support the model, advertising, and licensing arrangements described below.

Information we process

We receive information you provide, information generated through your use of freecode, and information from connected services and providers supporting our operations. Depending on your use of the service, this includes:

• Account and contact information, such as your name, email address, profile information, sign-in identifiers, and account or session records.
• Coding-session content, including prompts, assistant responses, code, file context, tool calls and results, command output, and other material processed by the agent while carrying out your requests.
• Usage and diagnostic information, such as feature interactions, request identifiers, model selection, timing, token usage, errors, outcomes, logs, and model traces. Model traces may contain complete requests and responses, including tool results and interface recommendations.
• Device, network, and security information, including IP addresses, approximate location, browser and device characteristics, hashed identifiers, interaction signals, and fraud or abuse assessments.
• Advertising and referral information, including selected task or conversation context, delivery and interaction events, referral identifiers, and account, device, or network identifiers used for relevance and measurement.
• Communications, feedback, and attachments you send us.

Signing in does not itself grant access to your repositories or inbox. The agent processes material made available through the permissions and services you use. Please do not provide credentials or information you are not authorized to share, except through features specifically intended to receive it.

Model providers

We send prompts and relevant context to model and inference providers to fulfill your requests. This may include earlier messages, code, file excerpts, and tool results. Providers and available models may change, and provider retention and processing depend on the arrangements applicable to the model used.

We may offer contributor models, under which a provider may retain and use submitted prompts, responses, and related context to evaluate, develop, or train AI models. Such arrangements can support lower-cost access. Where offered, contributor use is subject to applicable provider requirements and any additional notice or permission required before the affected processing begins.

Preparing and licensing data

We may prepare and license eligible user and assistant messages and associated usage data to approved commercial and research partners for evaluating, developing, and training AI models and related tools. This may include code or other material contained in those messages. It does not include a separate collection of unrelated files from your device.

We use reasonable, best-effort measures to de-identify and clean information before licensing, including removing direct identifiers, credentials, and sensitive material. Applicable personal-information protections continue to apply. Recipient agreements must limit permitted uses, protect confidentiality and security, and prohibit public release of the underlying dataset, reidentification, or contacting users. Approved onward licensing may be permitted subject to these restrictions.

We may receive compensation from these arrangements, which helps support free access. Participation does not entitle you to payment or a particular service benefit. Where a disclosure constitutes a sale or sharing of personal information under applicable law, the corresponding privacy rights apply.

Licensing begins only after applicable eligibility, notice, and permission requirements have been met. Existing optional research settings do not authorize dataset licensing. Information collected under earlier policies remains subject to the permissions and restrictions applicable when it was collected.

Advertising and recommendations

We and our advertising and recommendation partners process selected conversation or task context to provide relevant sponsored recommendations. We use best-effort redaction before sharing content for this purpose. Partners may also receive technical context, hashed account or email identifiers, referral identifiers, and device or network information for delivery, attribution, measurement, and fraud prevention.

Advertising technologies may store identifiers on your device and record impressions, clicks, referrals, and related activity. These uses may be considered sale, sharing, or targeted advertising under applicable privacy law. We do not provide sponsors with your sign-in credentials.

Product analytics and storage

We use cookies and similar technologies for authentication, security, preferences, analytics, and advertising measurement. Website analytics may collect page visits, referrals, approximate location, device information, and interactions such as scrolling, form activity, and install or sign-in actions. Our website analytics tags are excluded from account, sign-in, activation, admin, Terms, and Privacy pages. During sign-in and activation, we may link a previously collected browser identifier and referral information to your account.

We use PostHog to understand which marketing channels bring users who activate, return, and engage with sponsored recommendations. We collect campaign and ad-click identifiers, referral sources, country, device and installation information, and events such as sign-in, prompt submission, task outcomes, ad impressions, and ad interactions. We associate these events across sessions using account and device identifiers. Product analytics does not include the text of your prompts, responses, or code; separate processing of that content is described above. When an advertising platform is connected, we may send it activation and advertising-engagement conversions and associated attribution identifiers.

You can manage cookies and local storage through your browser settings. Blocking essential storage may affect sign-in or other functionality. Contact us using the details below to exercise applicable privacy rights; browser settings do not limit those rights.

Security and fraud prevention

We and our security providers use account, device, network, and activity information to assess risks, detect automation or coordinated abuse, associate related accounts, and protect access to the service. These assessments may result in additional checks, refused registration, or restricted access. Contact us if you believe a restriction is incorrect.

We maintain administrative, technical, and organizational safeguards appropriate to the information processed, including access restrictions and protected storage for content-bearing traces.

Other disclosures and international processing

We disclose information to providers supporting hosting, storage, authentication, security, analytics, customer support, and other operational functions. Connected services receive information needed for the features you use. Their own terms and privacy notices may also apply.

We may disclose information to comply with law or valid legal process, investigate misuse, protect rights or safety, or in connection with a financing, acquisition, or reorganization, subject to applicable confidentiality and privacy obligations.

Information may be processed in the United States and other countries where we or our providers operate. International transfers are subject to applicable data-protection requirements, including appropriate transfer safeguards where required. Contact us for information about safeguards relevant to your data.

Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, considering its nature, ongoing use, account status, legal obligations, and applicable permissions. Local session history may remain on your device until you remove it.

Operational event records expire after 30 days and stored model traces after seven days. Product analytics and attribution records have no fixed automatic expiry in our own storage and may be retained for ongoing measurement and analysis, subject to applicable deletion requests and retention requirements. Analytics providers may apply their own shorter storage limits. This retention does not extend the storage periods for operational logs or model traces. Account and device relationships are normally retained for the account lifetime and up to 30 days after deletion; limited security or restriction records may be retained longer where necessary to prevent repeated abuse or meet legal obligations. Eligible evaluation and licensed datasets are subject to their permitted purposes and applicable retention requirements.

Your privacy rights

Depending on your location and applicable law, you may request access, correction, deletion, or a copy of personal information; object to or restrict processing; withdraw consent; or opt out of sale, sharing, or targeted advertising. You may also use an authorized agent, appeal a denied request, or complain to your data-protection authority where applicable. We do not discriminate against you for exercising protected rights.

Send requests to andrew@freecode.sh. We may request information needed to locate records or verify a request where appropriate, and we will explain applicable exceptions. You can review and sign out a browser session on the Account page. Signing out does not itself delete server-side records.

Deletion and withdrawal apply subject to applicable law and the scope of the request. Previously licensed information and models already developed may remain where law permits. We take the deletion and recipient-notification steps required by law; these limitations do not remove your privacy rights.

Regional provisions

Where European or UK data-protection law applies, we rely on contractual necessity to provide requested services; legitimate interests for proportionate service improvement, security, and abuse prevention; legal obligations; and consent where required. Our interests are subject to applicable balancing and objection rights. Contributor training and dataset licensing involving personal information in these regions require prior, specific consent, which may be withdrawn.

Additional rights and requirements may apply under local law. These take precedence over any inconsistent provision of this policy.

Younger users

freecode is not intended for children under 13 or below a higher applicable minimum age. Users under 18 need parent or guardian permission as described in our Terms. Additional restrictions and permissions apply to processing younger users' information, including contributor features, licensing, and advertising. Contact us if you believe information has been collected from someone below the permitted age.

Changes and contact

We may update this policy as the service evolves. We will show the effective date and provide additional notice of material changes as required. Where a new use requires additional permission, we will obtain it before that use begins.

For questions or requests, contact Andrew Schmitz, operator of freecode, at andrew@freecode.sh.