Last updated:

This Privacy Notice for Code Optimizer (" we ," " us ," or " our " ), describes how and why we might access, collect, store, use, and/or share (" process ") your personal information when you use our services (" Services "), including when you:

• Visit our website at https://code-optimizer.com or any website of ours that links to this Privacy Notice
• Use Code Optimizer. Code Optimizer is a web-based code formatter for developers. You paste in messy code and it cleans it up instantly — formatting runs in the browser, so nothing is uploaded for the basic feature. Free covers five languages (JavaScript, TypeScript, Python, CSS, HTML). Pro ($9.99/mo) adds 20+ languages plus AI features that rewrite code for readability, flag likely bugs, and explain what a snippet does. Pro also includes a snippet vault with shareable links, batch processing up to 200 files, audit logs, and an API for CI pipelines at 50,000 requests a month.
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at dh@code-optimizer.com .

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us .

Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information .

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information .

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe .

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights .

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request , or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Notice in full .

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• names
• email addresses
• passwords

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe . You may find their privacy notice link(s) here: https://stripe.com/privacy .

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
• To fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
• To manage user accounts / facilitate account creation and authentication . Registration, sign-in, sessions, profile updates, account deletion.
• To comply with legal obligations . We retain certain records, including payment records held by our payment processor, for as long as required by tax, accounting, and other legal obligations, and we use your information to respond to privacy rights requests.
• To enforce our terms, conditions and policies . We use account and activity records to investigate suspected violations of our Terms of Service and to take action on accounts that breach them.
• To protect our Services . We use your IP address and account activity to apply rate limits, lock accounts after repeated failed sign-in attempts, and detect automated abuse such as scripted account creation or password guessing. These records are short-lived: a rate-limiting record is deleted within a few hours of the rate-limit window it belongs to closing, and a record of failed sign-in attempts is deleted within 24 hours of the last attempt (sooner if you sign in successfully, which clears it immediately). We do not keep either as a long-term log.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent .
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
• Diagnose problems and/or prevent fraudulent activities
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations
• We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We share personal information with the service providers that operate parts of the Service on our behalf: Stripe (payment processing), Google (the Gemini API for AI features, and Google Cloud for hosting), Neon (database hosting), our email provider (verification and password reset messages), and Sentry (error monitoring). We may also need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We use two strictly necessary first-party cookies to keep you signed in and to protect your account from forged requests. We do not use web beacons, tracking pixels, analytics cookies, or advertising cookies, and we do not permit third parties to place tracking technologies on our Services. Because none of our cookies are used for advertising or analytics, none of them constitute a “sale” or “sharing” of personal information under US state privacy laws. Specific information about each cookie we set is in our Cookie Policy.

To the extent these online tracking technologies are deemed to be a "sale"/"sharing" (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section " DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS? "

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice .

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this Privacy Notice govern your use of the AI Products within our Services.

Use of AI Technologies

We provide the AI Products through third-party service providers ("AI Service Providers"), including Google Cloud AI. As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in " WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION? " You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products

Our AI Products are designed for the following functions:

• AI insights

How We Process Your Data Using AI

All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties. This ensures high security and safeguards your personal information throughout the process, giving you peace of mind about your data's safety.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us .

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

One thing we keep after an account is deleted, and we would rather spell it out than have you find it: if a public share link was ever removed by us after a copyright complaint or an acceptable-use report, we keep a one-way cryptographic hash of that specific content, so the same content can't simply be published again. That record contains no name, no email address, no account identifier, and no copy of the code — only the hash, the reason the content was removed, and the date. It cannot be searched by person and it cannot be reversed to recover the content. We keep it because a removal that can be undone by deleting and re-uploading isn't a removal, and because the Terms commit us to acting on complaints. Nothing is retained this way for content that was never the subject of a complaint.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

9. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age or the equivalent age as specified by law in your jurisdiction has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18 or the equivalent age as specified by law in your jurisdiction, please contact us at dh@code-optimizer.com .

10. WHAT ARE YOUR PRIVACY RIGHTS?

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. If a decision that produces legal or similarly significant effects is made solely by automated means, we will inform you, explain the main factors, and offer a simple way to request human review. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section " HOW CAN YOU CONTACT US ABOUT THIS NOTICE? " below.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the UK and are unhappy with how we have handled your personal information, you can make a complaint directly to us. This is in addition to the rights you have under the UK General Data Protection Regulation and the Data Protection Act 2018.

How to contact us:

• Email: dh@code-optimizer.com
• Post: See " HOW CAN YOU CONTACT US ABOUT THIS NOTICE? "

What happens after you complain

• We will acknowledge your complaint within 30 days of receiving it.
• We will investigate without unjustifiable or excessive delay.
• We will keep you informed of progress and explain the outcome.

If you are not happy with our final response, you can refer your complaint to the Information Commissioner's Office, the UK supervisory authority.

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority .

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner .

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section " HOW CAN YOU CONTACT US ABOUT THIS NOTICE? " below.

Account Information

• Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

If you have questions or comments about your privacy rights, you may email us at dh@code-optimizer.com .

11. CONTROLS FOR DO-NOT-TRACK FEATURES

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Categories of Personal Information We Collect

A. Identifiers

Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name

YES

B. Personal information as defined in the California Customer Records statute

Name, contact information, education, employment, employment history, and financial information

C. Protected classification characteristics under state or federal law

Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data

NO

D. Commercial information

Transaction information, purchase history, financial details, and payment information

E. Biometric information

Fingerprints and voiceprints

F. Internet or other similar network activity

Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements

G. Geolocation data

Device location

H. Audio, electronic, sensory, or similar information

Images and audio, video or call recordings created in connection with our business activities

I. Professional or employment-related information

Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us

J. Education Information

Student records and directory information

K. Inferences drawn from collected personal information

Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Services and to respond to your inquiries.

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A - As long as the user has an account with us
• Category B - As long as the user has an account with us

Sources of Personal Information

How We Use and Share Personal Information

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, " WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION? "

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your Rights

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

Depending upon the state where you live, you may also have the following rights:

• Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
• Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland)
• Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon)
• Right to obtain a list of third parties to which we have sold personal data (as permitted by applicable law, including the privacy law in Connecticut)
• Right to review, understand, question, and depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Connecticut and Minnesota)
• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
• Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)

How to Exercise Your Rights

Request Verification

Appeals

13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

Australia and New Zealand

We collect and process your personal information under the obligations and conditions set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (Privacy Act).

This Privacy Notice satisfies the notice requirements defined in both Privacy Acts, in particular: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.

If you do not wish to provide the personal information necessary to fulfill their applicable purpose, it may affect our ability to provide our services, in particular:

• offer you the products or services that you want
• respond to or help with your requests
• manage your account with us
• confirm your identity and protect your account

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us by using the contact details provided in the section " HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU? "

Republic of South Africa

If you are unsatisfied with the manner in which we address any complaint with regard to our processing of personal information, you can contact the office of the regulator, the details of which are:

The Information Regulator (South Africa)

General enquiries: enquiries@inforegulator.org.za

Complaints (complete POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za

14. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

Code Optimizer

55 Kisco Park Dr

Mount Kisco , NY 10549

United States

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Most of it you can do yourself, immediately, from Account → Profile — you don't need to contact us or wait for us to act on a request:

• Review — your name, email address, and plan are shown on the Profile tab. Pro accounts also get an Audit Log tab listing account activity (sign-ins, snippet changes, API key rotations, billing events) with timestamps.
• Correct your name — edit it on the Profile tab; it saves immediately.
• See where you're signed in, and close sessions you didn't mean to leave open — "Where you're signed in" on the Profile tab lists every open session with when it started and when it expires, marks the one you're using right now, and offers a single button to sign out everywhere else. Useful if you've used a shared or borrowed computer. We show you timestamps rather than locations because we don't record where you signed in from.
• Correct your email address — use "Change" next to your email. We'll ask for your current password, then send a confirmation link to the new address. Your account keeps its existing address until you click that link, so a mistyped address costs you nothing. We also notify your current address that a change was requested, so that if it wasn't you, you find out.
• Delete your snippets — individually from the Snippet Vault. Public share links can be revoked there too, under "Public share links".
• Download a copy of everything — "Your data" on the Profile tab gives you a single JSON file containing every record we hold against your account: your profile, your saved snippets and their code, every share link you've published (including any that were disabled, and why), your formatting and API usage counts by month, your account activity log, your sign-in session records, and any pending email change. It's generated on the spot from the live database, not from a copy. Two things are deliberately left out, and the file names both: your password hash, and the stored value of your API key — neither is readable by us either, and including them would turn the file itself into a credential. The file also lists the one table it doesn't include (short-lived request counters, deleted automatically within hours) and why. No waiting and no request needed.
• Delete everything — the Danger Zone on the Profile tab deletes your account, your snippets, your shared snippets, your API key, and your usage history. It asks for your password first, and it can't be undone.

For anything not covered above — a question about what we hold, a correction we can't make from the Profile tab, or any other request under the rights listed earlier — email us at dh@code-optimizer.com and we'll act on it in line with applicable data protection law.

HOW WE HANDLE CODE YOU SUBMIT

In Short: this varies by feature, and the distinction matters enough to spell out precisely.

• The free formatter runs entirely in your browser. Your code is never transmitted anywhere for this.
• AI Optimize, AI Suggestions, and AI Analysis (Pro) send your code to our servers, which forward it to Google (specifically, the Gemini API) to generate a response. We do not store this code afterward — it is processed in memory to build the request and response, then discarded. We do not control Google's own retention practices for API requests; see their privacy policy for that.
• The public formatting API (/v1/format) processes submitted code server-side to return a formatted result but does not store the code itself — only a request count against your monthly usage limit.
• Snippet Vault (Pro, optional) — if you choose to save a formatted snippet, we store its title, language, tags, and code under your account. This only happens when you explicitly click "Save"; nothing is saved automatically. This is the one place code is genuinely stored, and only because you asked us to.
• Shared snippets — turning a saved snippet into a share link publishes a copy that anyone with the URL can read, without signing in. The public copy shows only the snippet's title, language, tags and code; it does not display your name, email, or anything else about you to whoever opens it. It is recorded against your account internally, which is what lets you revoke it. You can see every link you've published, and take any of them down, under "Public share links" in your vault — revoking stops a link working immediately. Links can also be given an expiry date when you create them. Deleting your account deletes every snippet you've shared along with it.

Last updated:

This Cookie Policy explains how Code Optimizer ("we," "us," and "our") uses cookies and similar technologies when you visit code-optimizer.com ("the Website"). It covers what these technologies are, why we use them, and how you can control them.

What are cookies?

Cookies are small data files placed on your computer or mobile device when you visit a website. They're widely used to make websites work, or work more efficiently.

Cookies set by the website you're visiting are called first-party cookies. Cookies set by anyone else are third-party cookies, and they're what allow an outside company to recognise your device across different websites — typically for advertising or analytics.

Every cookie this site sets is first-party. We use no third-party cookies at all.

Why do we use cookies?

Only for reasons that are technically required for the Website to work — what's usually called "essential" or "strictly necessary" cookies. We use no cookies for advertising, analytics, tracking, or profiling, and we don't allow anyone else to set cookies through our Website.

The cookies we set

There are exactly two, both first-party, both strictly necessary:

co_session

• Purpose: keeps you signed in between page loads, so you don't have to re-enter your password on every request.
• Provider: api.code-optimizer.com (our own backend)
• Type: server-set cookie, HttpOnly — unreadable by page JavaScript, which protects it from certain attacks
• Expires: 30 days

csrf_token

• Purpose: confirms that requests changing your account genuinely came from you, rather than being forged by another site. Not used for tracking or advertising.
• Provider: api.code-optimizer.com (our own backend)
• Type: server-set cookie, deliberately readable by page JavaScript — that's how the protection works
• Expires: 30 days

How can I control cookies?

Because both cookies are strictly necessary, there's nothing to opt in or out of — without them you can't sign in or stay signed in, so we don't offer a cookie preference centre. There are no optional, advertising, or analytics cookies to reject.

You can still refuse or delete cookies through your browser, but doing so will prevent you from signing in to an account. The free formatter, which runs entirely in your browser, will keep working.

How to manage cookies varies by browser — check your browser's help menu, or see:

• Chrome
• Firefox
• Safari
• Edge
• Opera

What about web beacons and other tracking technologies?

We don't use them. No web beacons, tracking pixels, clear gifs, fingerprinting, or session recording — on the Website or in the emails we send. The only emails we send are email verification and password resets, and they contain no tracking of any kind.

Do you serve targeted advertising?

No. We don't serve advertising, we don't allow third parties to serve advertising through the Website, and no advertising network receives information about your visit.

Does anything else store data in my browser?

Yes, but not via cookies. We use your browser's localStorage to remember small preferences — for example, that you've dismissed the cookie notice. This never leaves your device and is not sent to our servers.

How often will you update this Cookie Policy?

We may update it to reflect changes to the cookies we use, or for operational, legal, or regulatory reasons. The date at the top shows when it was last updated.

Where can I get further information?

If you have questions about our use of cookies, email dh@code-optimizer.com, or write to us at:

Code Optimizer
55 Kisco Park Dr
Mount Kisco, NY 10549
United States
Phone: +1 (914) 334-1574

For everything else we collect and why, see our Privacy Policy.

Last updated:

1. Acceptance of these terms

By creating an account or using Code Optimizer ("the Service"), you agree to these Terms of Service and our Privacy Policy. If you don't agree, please don't use the Service.

2. What the Service is

Code Optimizer is a code formatting tool. The Free tier formats code entirely in your browser for a set of supported languages. The Pro tier adds AI-powered rewriting, suggestions, and explanation features (which send your code to our servers and Google's Gemini API to generate a response — see the Privacy Policy), a private Snippet Vault, batch processing, and a programmatic API.

3. Accounts

• You must be at least 18, or the age of majority where you live, to create an account. We don't knowingly collect information from anyone younger (see the Privacy Policy). We don't verify age at sign-up, so this is something you're confirming when you create an account.
• You need an account (email + password) for Pro features, the Snippet Vault, and API access. The free formatter itself doesn't require one.
• You're responsible for keeping your password secure and for all activity under your account. Tell us immediately if you suspect unauthorized access.
• You must provide a real, working email address — it's how we deliver password resets and account notices. You can correct or change it at any time from Account → Profile; we'll ask for your password and confirm the new address before switching, and we'll tell your old address that a change was requested.
• You can delete your account at any time from Account → Profile. This is immediate and permanent (see the Privacy Policy for exactly what's deleted).

4. Subscriptions and billing

• The Pro plan is a recurring subscription billed through Stripe. Starting a subscription creates a real charge according to the pricing shown at checkout.
• You can manage or cancel your subscription any time from Account → Billing (the Stripe Billing Portal). Cancelling stops future charges; it doesn't retroactively refund the current billing period unless we say otherwise at the time.
• If a payment fails, we may downgrade your account to Free until it's resolved.
• Deleting your account cancels any active subscription as part of that process.

5. Acceptable use

You agree not to:

• Use the Service for anything illegal, or to process code you don't have the right to submit.
• Attempt to bypass rate limits, account lockouts, or Pro-plan gating (including sharing API keys or account credentials to get around per-account limits).
• Attempt to access another user's account, data, or Snippet Vault without authorization.
• Interfere with or disrupt the Service — including excessive automated requests intended to degrade it for others, beyond normal API use within your plan's limits.
• Reverse-engineer the Service beyond what's necessary for interoperability under applicable law, or resell API access without our agreement.

We may suspend or terminate accounts that violate this section.

6. Your code, and what we do with it

You own your code. We don't claim any ownership over anything you submit, format, store in your Snippet Vault, or publish with a share link. Nothing in these terms gives us the right to use your code for our own purposes, to train models on it, or to show it to anyone you haven't chosen to show it to.

What you do grant us is a narrow, purely functional licence — the permission we technically need in order to run the features you choose to use, and nothing wider:

• To format it: for the free formatter, none at all — that runs in your browser and the code never reaches us.
• To process it: for the public API and the AI features, permission to receive the code, process it in memory, and (for AI features only) transmit it to Google's Gemini API to generate a response.
• To store it: for the Snippet Vault, permission to store and reproduce the snippet so we can give it back to you when you sign in.
• To publish it: for share links only, permission to host, reproduce, and publicly display that snippet to anyone who has the link, for as long as the link exists. This is the only permission that lets anyone other than you see your code, and it applies only to snippets you explicitly choose to share.

Each of these licences is non-exclusive, royalty-free, and exists solely to operate the feature it describes. They end when the content does. Revoke a share link, delete the snippet, or delete your account, and the corresponding permission ends with it — we don't keep a surviving or perpetual licence to anything you've removed.

Don't submit code you don't have the rights to, or that contains someone else's confidential or proprietary information without authorization.

7. Content you publish with a share link

Sharing a snippet is different in kind from everything else here: it makes that code readable by anyone who has the URL, without signing in. This section applies to that, and only to that.

What you're confirming when you publish. Each time you create a share link, you confirm that:

• You own the code, or otherwise have the right to publish it — including any rights held by an employer or client, and any open-source licence terms that apply to it.
• Publishing it doesn't infringe anyone's copyright, trade secret, contract, or other rights.
• It doesn't contain anyone else's personal information, credentials, or confidential data.

What not to publish. You may not use share links to publish code that is unlawful; that is designed to cause harm (malware, exploits intended for use against systems you don't control, credential harvesters); that infringes someone else's rights; that contains another person's personal data; or that is used to host content unrelated to code in order to get free file hosting.

We don't review what you publish. Share links are created automatically, and nobody at Code Optimizer reads, screens, approves, or monitors snippets before or after they're published. We have no obligation to do so. That means publishing something is your decision and your responsibility, and it also means we rely on reports to find out about a problem.

What we may do. If we become aware that published content breaks this section or Section 5, we may disable or delete that share link, or the underlying snippet, without notice, and may suspend or terminate the account behind it. We may do this at our discretion and we're not obliged to.

Where we do disable a link, you'll see it in two places in your own account, without having to ask us: the link appears in "Public share links" marked as disabled with the reason, and an entry with that reason is added to your Audit Log. Disabling is reversible on our side, so if you believe a link was taken down in error, tell us and we can put it back.

Content we've removed can't be published again. When we disable a share link, we record a one-way cryptographic hash of that content. Attempting to publish the same content again — from the same account or any other, and whether or not the original snippet still exists — is refused, with the reason shown. To be precise about the limits of this: it matches the content exactly, so it is not a filter that detects similar or edited code, and we don't claim otherwise. If we restore a link after a counter-notice or because the removal was a mistake, the restriction is lifted at the same time and you can publish freely again. See Section 7 of the Privacy Policy for what that record contains and how long we keep it.

Reporting something. If a share link points at code you believe shouldn't be public — your copyrighted work, your credentials, your personal data, or anything in the "what not to publish" list above — email dh@code-optimizer.com with the full link and what the problem is. For copyright specifically, see Section 8. You don't need an account to report anything.

What revoking can and can't do. You can revoke any link you've created at any time from "Public share links" in your vault, and it stops resolving immediately; deleting the snippet or your account removes the published copy too. But treat a link as genuinely public for as long as it exists: anyone who opened it beforehand may already have copied the code, and neither revoking nor deletion can retract that.

8. Copyright complaints

We respond to notices of claimed copyright infringement about content published through share links. If you believe your copyrighted work has been published here without authorization, send a written notice to dh@code-optimizer.com with the subject line "Copyright notice", including:

• Identification of the work you say has been infringed.
• The full share link (or links) you're complaining about, specific enough for us to locate the content.
• Your name, address, telephone number, and email address.
• A statement that you have a good-faith belief the use isn't authorized by the copyright owner, its agent, or the law.
• A statement that the information in your notice is accurate, and — under penalty of perjury — that you are the copyright owner or authorized to act on the owner's behalf.
• Your physical or electronic signature.

On receiving a complete notice we'll disable the share link; the account holder sees what was removed and the reason in their own account, as described in Section 7. If you're that account holder and you believe the removal was a mistake or a misidentification, you can send a counter-notice to the same address, including your contact details, identification of what was removed, a statement under penalty of perjury that you believe it was removed in error, and your consent to the jurisdiction described in Section 15. We may restore the content after a counter-notice unless the original complainant notifies us of legal action. We may terminate accounts that repeatedly publish infringing content.

Please don't use this address for anything other than a genuine copyright complaint — knowingly submitting a false notice carries legal consequences for the sender.

9. AI features — a specific disclaimer

AI Optimize, AI Suggestions, and AI Analysis are generated by a language model, not a deterministic compiler. They can be wrong, incomplete, or introduce subtle behavior changes, despite the prompt instructing the model to preserve behavior. Review AI-generated changes before relying on them, especially for anything behavior-critical — the same way you'd review any code before shipping it, AI-assisted or not.

10. Service availability

We aim to keep the Service running reliably but don't guarantee uninterrupted availability. The free, client-side formatter keeps working even if our backend is temporarily down; sign-in, Vault, billing, AI features, and the API all depend on the backend and won't work during an outage. Check our status page for current, live-checked system status.

11. Disclaimer of warranties

The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We don't warrant that the Service will be error-free, that formatting or AI output will be perfect or bug-free, or that defects will be corrected.

12. Limitation of liability

To the maximum extent permitted by law, Code Optimizer won't be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, profits, or revenue, arising from your use of the Service — including reliance on AI-generated code changes. Our total liability for any claim relating to the Service is limited to the amount you paid us in the 12 months before the claim arose (or $0 if you were on the Free plan).

13. Termination and suspension

You can stop using the Service and delete your account at any time. We may suspend or terminate accounts that violate Section 5 (Acceptable use) or Section 7 (Content you publish), or discontinue the Service, with notice where reasonably practical.

What a suspension actually does. It signs you out on every device, prevents you signing back in, and disables any public share links you've published. It does not delete your account, your snippets or your shared snippets — a suspension can be lifted, and if we lift it your account and its contents are intact. When you try to sign in you'll be told the account is suspended and given the reason. Share links disabled by a suspension stay disabled until we separately restore them, because whether your content should be public again is a different question from whether your account should work.

Your data rights are not suspended with your account. While suspended you can't use the self-service data download or account deletion on the Profile tab, because you can't sign in. Email us at dh@code-optimizer.com and we will act on a request for a copy of your data, or for its deletion, within the time applicable data protection law allows — the same as for anyone else.

14. Changes to these terms

If we make material changes, we'll update the date at the top of this page. Continued use of the Service after a change means you accept the updated terms.

15. Governing law

These terms are governed by the laws of [Your Jurisdiction], without regard to conflict-of-law principles.

16. Contact us

Questions about these terms? Email dh@code-optimizer.com.