Privacy Policy

Last updated: November 2, 2026

1. About this policy

code-config.com is a service operated by Lucky Fried Gains LLC ("we", "us", "our"). This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. It covers this website, the web application at app.code-config.com, the desktop app and command-line tool you run on your own computer (the "local client"), and the emails we send.

Send privacy questions or requests to hello@code-config.com.

2. The short version

• We collect what we need to run your account, sync your toolkits, and bill your subscription.
• We measure how people find and use code-config.com, including which of our ads and campaigns bring people here, and we use that to improve the product and run the business.
• We work with service providers, including Amplitude for product analytics and Reddit for advertising measurement.
• Your keys stay on your computer, and your project files are read on your computer, not uploaded to us.
• You choose whether analytics and advertising measurement run in your browser, and you can change that choice at any time.

3. Information we collect

Depending on how you use code-config.com, we may collect the following.

• Account information. Your email address and sign-in details. You sign in with Google, through our authentication provider Supabase, or with a sign-in link we email to you. We also keep a record of which version of our Terms and of this Privacy Policy your account accepted, and when.
• Content you save. The toolkits, projects, settings, and other content you save in the service, and the GitHub connection information described in section 5.
• Your computers and the local client. A record of each computer you connect, details about that computer and the version of the local client on it, the folder paths where your projects live, which toolkit a project uses, and a record of each launch: which coding app started, with which toolkit, for which project, on which computer, and when. When you connect a computer, we also see the IP address the request comes from and the approximate location and network operator Cloudflare derives from it.
• Payment and subscription information. Paid plans are sold through Link, a merchant of record service operated by Stripe. Your card details go to Stripe. We receive your plan, your subscription status, what you paid, and the related account information Stripe reports to us, and we keep a record of the offers, discounts, free months, and referrals that apply to your account.
• Usage information. How you use our website, the web application, and the service: the pages and screens you visit, the actions you take, and product milestones such as signing up, connecting a computer, starting a trial, and subscribing. Section 7 describes this in more detail.
• Device and browser information. Your IP address, browser type, the technical details any internet request carries, the language and screen size your browser reports and how long the page took to load, and random identifiers stored in your browser that let us and our partners recognize the same browser across visits.
• Advertising and campaign information. When you arrive through one of our ads or campaign links, the name of the campaign and the site that sent you, and the click identifier an advertising platform adds to its links. Sections 7 and 8 describe how this is used and stored.
• Communications. The emails we send you and whether they were delivered. For product news and offers, we also record whether an email was opened and which links in it were clicked. If you invite someone to a workspace or refer a friend, we use the email address you give us to send them that invitation.
• Support and feedback. Support messages and other communications you send us, and, if you allow it in Privacy settings, the short notes your coding agents send us about what broke, slowed them down, or helped.
• Messages between your agents and teammates. The messages that your coding agents and the people in your workspace send to one another: what each message says, who sent it, who received it, the projects it concerns, and when it was sent. Every member of the workspace can read them.
• Community. Toolkits you publish to Community; the stars and written reviews you publish under your name, which anyone can read; reports you send us about published content, including the reason you pick and any details you write; the decisions our staff record about that content and who made them; and the links to apps your coding agents put online, kept so you can find them in one place.
• Service logs. Network and request logs generated by Cloudflare, which hosts and fronts our services.

4. What stays on your computer

Your keys stay on your computer. Secret values live in the secret store on your own computer, and the local client puts them into each coding app's configuration there. What code-config.com syncs is the names and bindings that point to them, so that a toolkit can say which credential a tool expects.

Your project files stay on your computer too. The local client reads the files in your project folders on your computer to set up your tools, and it sends us the records described in section 3, not the files themselves. Sharing a toolkit with Community sends the frozen mapping of which published GitHub repository items it uses, together with the toolkit's name and description; it never sends a file from your computer or a secret value.

Messages between your coding agents are stored with us as written, so do not put a secret value in one.

A toolkit you publish to Community is shown publicly: the name and handle of the workspace that published it, what the toolkit says about itself, what it is made of, the names of the credentials its tools ask for, and how many accounts have adopted it. Publishing a toolkit is an action you take deliberately.

5. GitHub and repository features

A workspace can connect GitHub to use repository features. Connecting installs our GitHub App on a GitHub user account or organization that you choose.

• GitHub tells us which account the App was installed on and whether the installation covers all repositories on that account or a selected list of them. We keep that connection record together with who created it and when.
• The one-time user authorization we receive during setup is used to confirm that the installation belongs to the account you chose, and is revoked with GitHub once that check finishes. We hold the authorization information needed for the GitHub features your workspace enables.
• We ask GitHub for short-lived access as the operations you request need it. That access expires on GitHub's schedule.
• We read repository details and repository contents in order to build the map of components code-config.com supports, and we keep the resulting map. Cloudflare stores, for us, the repository files we read to build these maps and the content you choose to share with the community.

6. How we use information

We may use the information described above to:

• provide the service: run your account, sync your toolkits, connect your computers, launch your coding apps, provide GitHub and Community features, and process your subscription;
• understand and improve the product: see which features people use, where they get stuck, and what to build or fix next;
• measure and improve our advertising and marketing: see which ads, campaigns, campaign links, and referrals bring people to code-config.com, attribute sign-ups, trials, purchases, and product milestones to the campaigns that led to them, and decide where to advertise;
• run the business: produce business metrics and internal reports, such as acquisition, conversion, retention, revenue, and forecasts;
• communicate with you: send sign-in links, receipts, and service notices, answer your requests, and send product news, tips, and offers, each of which you can unsubscribe from;
• keep the service safe: protect accounts, apply rate limits, and detect and prevent fraud, abuse, and security problems;
• meet legal obligations: keep accounting and tax records, respond to lawful requests, and enforce our Terms.

We use the content of messages between your coding agents and the people in your workspace so your agents and teammates can coordinate their work, and for no other purpose.

7. Analytics and advertising

Product analytics. We collect product analytics on how our website, the web application, and the service are used, and Amplitude processes it for us. In your browser, this records the pages you visit and the actions you take, grouped by a random identifier that code-config.com stores in your browser, along with the language and screen size your browser reports and how long the page took to load, and the technical details any internet request carries, such as your IP address. Our servers also record product events, such as an account being created, a trial starting, or a subscription being paid, with the plan, the amount, and the campaign that brought the account.

Campaign attribution. When you arrive through one of our campaign links, or a link that names the campaign and the site that sent you, code-config.com keeps that campaign information in your browser for up to 28 days and stores it with your account when you sign up. We use it in our own records and product analytics to count which campaigns bring people who sign up, start a trial, and subscribe.

Advertising measurement with Reddit. We advertise on Reddit, and we use Reddit's measurement tools to see which ads work and to improve them. If you arrive from a Reddit ad, the link carries a click identifier; we keep it in your browser for up to 28 days and with your account, so the sign-up that follows can be matched to the ad. When advertising measurement is on:

• Reddit's pixel runs on code-config.com and tells Reddit which pages you visit and when you click to sign up. Reddit keeps its own identifiers for your browser in cookies on code-config.com.
• Our servers tell Reddit when your account reaches milestones such as signing up, starting a trial, subscribing (with the amount), connecting a computer, setting up a toolkit, and reaching launch milestones. With each report Reddit receives the click identifier and browser identifier described above, a one-way code made from your email address and one made from your account identifier (so Reddit can match the report to its own records without receiving your address), and, for actions you take in the web application, your IP address and browser type.

Reddit uses this information to measure our ads and handles it under its own privacy policy as well as its terms with us.

Your choice. In regions where the law requires consent, including the European Economic Area, the United Kingdom, and Switzerland, product analytics in your browser and advertising measurement start only after you allow them in the cookie banner. Elsewhere they are on by default, and you can turn them off. One answer covers both product analytics and advertising measurement. Your answer is kept in a cookie shared by code-config.com and its subdomains for 12 months (some browsers, such as Safari, keep it for 7 days), so an answer given on this website or in the web application applies on both. While you are signed in, your latest answer also applies to the advertising measurement for your account. Declining changes nothing about the product.

You can change your choice at any time: choose Decline under Cookie preferencesin this site's footer, turn off the switch in the Privacy section of account settings at app.code-config.com, or use the button below. Each one turns off analytics and advertising measurement in this browser, on this website and in the web application, from the next page you load.

Turn off analytics and advertising measurement in this browser

8. Cookies and similar technologies

code-config.com stores a small amount of information in your browser, in cookies and in browser storage, written by this website and by the web application at app.code-config.com. It falls into three groups.

• Necessary and preference. Your sign-in, the workspace you are working in, which versions of our Terms and of this Privacy Policy your account has accepted, your analytics and advertising answer, and how you like the site to look. Your analytics and advertising answer and how you like the site to look are kept in cookies shared by code-config.com and its subdomains, so one choice applies to both; the answer is kept for 12 months, or 7 days in some browsers. Campaign information from the link you arrived through is kept for up to 28 days, in your browser and in a cookie shared by code-config.com and its subdomains, so we can count the campaign when you sign up, including when you sign up from the desktop app.
• Analytics. While analytics is on, a random identifier that lets our analytics group the events from this browser.
• Advertising. The click identifier of the Reddit ad you followed, kept for up to 28 days and removed when you decline, and, while advertising measurement is on, the identifiers Reddit's measurement keeps in its own cookies on code-config.com. Declining removes Reddit's cookies from this browser.

Your browser's own settings let you view, clear, or block what is stored.

9. Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases.

Our legitimate interests are running, securing, and improving code-config.com, understanding how people find it, and running our business. You can object to processing based on legitimate interests, as described in section 13.

10. Service Providers and Other Recipients

We share information with the following kinds of recipients.

• Service providers that process information on our behalf to run code-config.com:
  • Supabase — accounts, authentication, and our database;
  • Google — sign-in;
  • GitHub — repository features;
  • Stripe — payments and merchant of record services, through Link;
  • Resend — email;
  • Cloudflare — hosting, storage, network, and request logs; and
  • Amplitude — product analytics.
• Advertising partners, currently Reddit, which receive the information described in section 7 to measure our advertising, under their own terms and privacy policies as well as their terms with us.
• Other members of your workspace, who see the workspace's content and messages, and the public, for anything you publish to Community.
• Legal and business transfers. Authorities or others where the law requires it, or where needed to protect our users, our systems, or our rights; and a buyer, investor, or successor in connection with a merger, acquisition, financing, or other corporate transaction.

We do not sell personal information for money. Sharing information with advertising partners to measure our ads may be considered "sharing" or a "sale" under some US state privacy laws; section 14 explains how to opt out.

11. Retention

We keep personal information for as long as we need it for the purposes in this policy: to provide code-config.com, maintain accounts and subscriptions, measure our campaigns, comply with legal and accounting requirements, resolve disputes, enforce agreements, and maintain security. When we no longer need it, we delete it or make it anonymous. Different categories are kept for different periods:

• account information, saved content, and the campaign information and advertising click identifier stored with your account are kept while your account exists;
• payment and accounting records are kept for as long as tax and accounting rules require;
• campaign information and advertising click identifiers in your browser are kept for up to 28 days;
• messages between your coding agents and the people in your workspace are removed from the service after 90 days; and
• when a GitHub connection is disconnected, we keep a record that the connection existed and that it was removed.

Information our partners receive is kept under their own retention practices.

12. Deleting your account

You can delete your account at any time from Settings in the app. When you do, we delete or make anonymous the information associated with your account, except information we are permitted or required to keep for legal, security, accounting, dispute-resolution, or backup purposes. For any other request about your account, email hello@code-config.com.

13. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to how we use it, and to withdraw consent at any time where we rely on consent. To make a request, email hello@code-config.com. We will respond as required by applicable law, and we may verify your identity before completing a request. You may also lodge a complaint with your local data protection authority.

Some choices are available directly:

• Analytics and advertising measurement: use Cookie preferencesin this site's footer, or the Privacy section of account settings at app.code-config.com, as described in section 7;
• Emails: every product news and offers email has an unsubscribe link, andNotifications in account settings lets you choose what you receive. Service emails, such as sign-in links and receipts, are part of the service;
• Your data: the Privacy section of account settings offers a download of your workspace configuration, and you can delete your account from Settings in the app.

14. Notice for US residents

Some US state privacy laws, including California's, give residents specific rights and ask us to describe our practices in particular terms. In the last 12 months we have collected these categories of personal information, from you, from your browser and devices, and from the services you connect:

• identifiers, such as your email address, account identifier, IP address, browser identifiers, and advertising click identifiers;
• commercial information, such as your plan, subscription, and purchases;
• internet and other network activity, such as how you use our websites and the service, and your interactions with our ads and emails;
• approximate location, derived from your IP address when you connect a computer; and
• content you provide, such as toolkits, messages, reviews, and support requests.

We collect and use these categories for the purposes in section 6, disclose them to the recipients in section 10, and keep them as described in section 11. We disclose identifiers, commercial information, and internet activity to Reddit to measure our ads, which may count as "sharing" for cross-context behavioral advertising, or as a "sale", under these laws. We do not sell personal information for money, and we do not use or disclose sensitive personal information for purposes that require offering a right to limit it.

To opt out of this sharing, choose Decline in the cookie banner or underCookie preferences in this site's footer, turn off analytics and advertising measurement in the Privacy section of account settings, or use the button in section 7 of this policy. You can also email us.

You may ask to know what personal information we have about you, to correct it, or to delete it. You can make a request yourself or through an authorized agent, who will need your written permission. We will not treat you differently for using these rights. If we decline your request, you may ask us to reconsider by replying to our answer.

15. International transfers

We and our service providers operate in the United States and other countries. Where information is transferred out of the EEA, the United Kingdom, or Switzerland, we rely on transfer mechanisms available under applicable law, which may include adequacy decisions, the EU-U.S. Data Privacy Framework, or standard contractual clauses, depending on the provider.

16. Security

We protect information with safeguards suited to it, such as encrypted connections and access controls. No system is perfectly secure, so we also keep your keys on your own computer, as described in section 4.

17. Children

code-config.com is for adults: our Terms require you to be at least 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

18. Changes to this policy

We may update this Privacy Policy as our services, our practices, or the law change. We will update the "Last updated" date when we do. If we materially change how we collect, use, or share personal information, we will give additional notice where appropriate or required by law.

19. Contact

Lucky Fried Gains LLC · Email: hello@code-config.com