Privacy Policy

Last updated: November 11, 2026

This Privacy Policy explains how [OPERATOR LEGAL NAME], [ADDRESS] ("we", "us"), the controller of ShareKodigo at sharekodigo.dev (the "Service"), handles personal data. We designed the Service to collect as little as possible: there are no accounts, no registration and no tracking.

1. Summary

• We do not ask for your name, email address or phone number.
• Room contents are stored on our server and deleted automatically after 30 days without visits.
• Preferences are stored only in your own browser.
• We use no advertising, no analytics and no tracking cookies.
• Code execution and all browser tools run on your device; their input never reaches our server.

2. Data we process

2.1 Room contents

When you use a room, the code, file names, and the display name and color shown to collaborators are sent to our server over a WebSocket connection and stored in our hosting provider's storage (Cloudflare Durable Objects, which keeps each room separately) or, if self-hosted, on the server's disk. Display names are generated randomly (for example, "Turbo Panda"), can be edited, and are shown only to people in the same room. Room contents are personal data only if you or others put personal information in them, which we ask you not to do.

2.2 IP address and connection data

Our server keeps your IP address in memory while you are connected, only to limit the number of simultaneous connections per IP address and prevent abuse. It is not written to a database. Our hosting provider keeps standard server logs (such as IP address, date and time, requested URL and browser user agent) for security and operation.

2.3 Cloudflare

The Service may be delivered through Cloudflare, which provides content delivery, HTTPS and protection against denial-of-service attacks. Cloudflare processes IP addresses and request data to do this and may set strictly necessary security cookies, such as __cf_bm, to distinguish people from bots. See our Cookie Policy.

2.4 Data stored in your browser

We use your browser's localStorage to remember your preferences: editor theme, font size, word wrap, minimap, ligatures, display name and color, interface language, and, temporarily, code passed between the editor and a tool page. This data stays on your device and is not sent to us except where it is part of a room (your display name and color).

Room passwords. If a room owner protects a room with a password, the password is sent to our server over an encrypted connection and we store only a salted PBKDF2-SHA256 hash of it, never the password itself. We also store only a SHA-256 hash of the owner key. We cannot see or recover a room password; if it is forgotten, the room cannot be unlocked.

2.5 Emails you send us

If you contact us at support@sharekodigo.dev, we process your email address and the content of your message to answer you.

2.6 What we do not collect

We do not collect account data, real names, phone numbers or payment data. We do not process the code you run, because it runs only in your browser, and we do not receive what you enter into the malware scanner, secret detector, code-to-image, diff checker or developer tools.

3. Why we process data and legal bases

Where data protection laws such as the EU or UK General Data Protection Regulation (GDPR) apply, we rely on these legal bases:

• Performance of the service you request (Article 6(1)(b) GDPR): storing and synchronizing room contents and display names so that collaboration works.
• Legitimate interests (Article 6(1)(f) GDPR): keeping the Service secure and available, limiting connections per IP, preventing abuse, keeping server logs and using Cloudflare protection.
• Legal obligations (Article 6(1)(c) GDPR): responding to lawful requests from authorities and handling legal notices such as copyright complaints.
• Legitimate interests in answering your messages when you contact us.

We do not use your data for advertising, profiling or automated decision-making.

4. How long we keep data

• Rooms: deleted automatically after 30 days without visits, or sooner if you ask us to delete them. Deleted rooms cannot be recovered.
• IP addresses in server memory: only while the connection is open.
• Server logs: kept according to our hosting provider's and Cloudflare's standard retention periods.
• Emails: kept as long as needed to handle your request and any follow-up, and then deleted, unless we must keep them for legal reasons.
• Browser storage: stays on your device until you clear it.

5. Who we share data with

We do not sell or rent personal data. We share it only with:

• Our hosting provider, which runs the server that stores rooms and keeps server logs.
• Cloudflare, if used, for content delivery, HTTPS and security.
• Our email provider, to receive and answer messages.
• Authorities or other parties when required by law or needed to protect our rights or the safety of others.

Remember that anyone who has a room link can see the room's contents and the display names of the people in it.

6. International transfers

Our providers may process data in countries other than yours, including the United States. Where required, such transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to lodge a complaint with your data protection authority.

To exercise these rights, email support@sharekodigo.dev. Because there are no accounts, we usually cannot link data to you without more information. To identify your data in a room, please include the room link. We may ask for additional details to confirm the request is legitimate. We will reply within the time required by law, normally within one month.

You can delete the preferences stored in your browser at any time by clearing your browser's site data for sharekodigo.dev.

8. Children

The Service is not intended for children under 13, or under the age of digital consent in their country if higher. We do not knowingly collect personal data from them. If you believe a child has provided personal data in a room, contact us with the room link and we will delete it.

9. Security

We use HTTPS for all connections, self-host our fonts and scripts so that no third-party CDN receives your requests, run code only in your browser, and limit connections to prevent abuse. No system is perfectly secure, and room links are not passwords: do not put secrets or sensitive personal data in rooms.

10. Changes to this policy

We may update this policy, for example if we add features. If we ever add analytics or advertising, we will update this policy first and ask for your consent where the law requires it. The date of the latest version is shown on this page.

11. Contact

For privacy questions or requests, contact support@sharekodigo.dev. See also our Terms of Service.