Last updated:

Who this policy covers

This Privacy Policy explains how [Your Company Name] ("we," "us," "Code Optimizer") collects, uses, and shares information when you use codeoptimizer.dev (the "Service"). It applies whether or not you create an account.

Information we collect

What you give us directly

• Account information: name and email address when you register. Your password is hashed (bcrypt) before it's stored — we never store or have access to it in plain text, and can't recover it for you if you forget it (only reset it, via a one-time emailed link).
• Snippet Vault content (Pro, optional): if you choose to save a formatted snippet to your Vault, we store its title, language, tags, and code. This only happens when you explicitly click "Save" — nothing is saved automatically.
• Payment information (Pro): handled entirely by Stripe, our payment processor. We never see or store your card details — we only store a Stripe customer reference id so we know which subscription belongs to which account.

What we collect automatically

• IP address — used for rate limiting and abuse prevention (see "How we use information" below), not stored as a persistent profile tied to your account.
• Cookies — see "Cookies" below.
• Basic account activity — sign-ins, snippet changes, API key rotation, and billing events, timestamped, viewable in your own Account → Audit Log (Pro).

Code you submit for formatting or AI features

This varies by feature, and we think the distinction matters enough to spell out precisely:

• The free formatter runs entirely in your browser. Your code is never transmitted anywhere for this.
• AI Optimize, AI Suggestions, and AI Analysis (Pro) necessarily send your code to our servers, which forward it to Google (specifically, the Gemini API) to generate a response. We do not store this code afterward — it's processed in memory to build the request and response, then discarded. We don't control Google's own retention practices for API requests; see their privacy policy for that.
• The public formatting API (/v1/format) processes submitted code server-side to return a formatted result but does not store the code itself — only a request count against your monthly usage limit.
• Snippet Vault — see above; this is the one place code is genuinely stored, and only because you asked us to.

Cookies

We use two cookies, both first-party:

• co_session — keeps you signed in. HttpOnly (invisible to and unreadable by page JavaScript, which protects it from certain attacks), and marked Secure whenever your connection is actually HTTPS.
• csrf_token — a security token that helps confirm requests changing your account genuinely came from you, not a forged request from another site. Not used for tracking or advertising.

We don't use third-party advertising or analytics cookies.

How we use information

• To provide the Service — create your account, save your Vault snippets, run AI features, process payments, and remember that you're signed in.
• To secure the Service — rate limiting and login-lockout protections (see our Terms of Service) use your IP address and account activity to detect and slow down abuse, like scripted account creation or password guessing.
• To communicate with you — password reset links, email verification, and (if you contact us) replies to your questions. We do not send marketing email unless you separately opt in somewhere that says so.

Who we share information with

We don't sell your information. We share it only with the following, each strictly to provide the part of the Service that needs them:

• Stripe — payment processing for Pro subscriptions.
• Google (the Gemini API) — only when you use AI Optimize, AI Suggestions, or AI Analysis; only the code you submit for that specific request, not your account details.
• Our email provider (once configured) — to deliver password reset and email verification messages.
• Law enforcement or legal process, if we're required to by valid legal request.

How long we keep information

We keep your account information for as long as your account exists. If you delete your account (Account → Profile → Delete Account), we permanently delete your account record, Vault snippets, API key, usage history, and sign-in lockout history immediately — this is a real deletion, not a soft "deactivation," and it can't be undone. Previously shared snippet links may continue to resolve after deletion, since a shared snippet's public copy doesn't contain any information that identifies you or your account.

Your rights

Regardless of where you live, you can:

• Access your data — everything we hold about you is visible in your own Account pages.
• Correct your data — update your name any time in Account → Profile.
• Delete your data — Account → Profile → Delete Account, immediate and permanent, as described above.

If you're in the EU/UK, this covers the rights GDPR gives you (access, rectification, erasure, and objection to processing) — if you'd like to exercise a right the account settings don't cover directly, contact us using the details below. If you're a California resident, this also covers your CCPA rights to know, delete, and opt out of the sale of personal information (we don't sell personal information, so there's nothing to opt out of).

Security

Passwords are hashed with bcrypt, never stored in plain text. Sessions use httpOnly, Secure cookies. State-changing requests are protected against cross-site forgery. Repeated failed sign-in attempts are rate-limited. No system is perfectly secure, but these aren't marketing claims — they're genuinely how the account system is built.

Children's privacy

The Service isn't directed at children under 13 (or the relevant minimum age in your jurisdiction), and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we'll delete it.

International transfers

We and our sub-processors (Stripe, Google, our email provider) may process information in countries other than your own. Each has its own safeguards for cross-border transfers; see their respective privacy policies for specifics.

Changes to this policy

If we make material changes, we'll update the date at the top of this page. Continued use of the Service after a change means you accept the updated policy.

Contact us

Questions, or want to exercise a privacy right not covered above? Email dhhutchenwork@gmail.com.

Last updated:

1. Acceptance of these terms

By creating an account or using Code Optimizer ("the Service"), you agree to these Terms of Service and our Privacy Policy. If you don't agree, please don't use the Service.

2. What the Service is

Code Optimizer is a code formatting tool. The Free tier formats code entirely in your browser for a set of supported languages. The Pro tier adds AI-powered rewriting, suggestions, and explanation features (which send your code to our servers and Google's Gemini API to generate a response — see the Privacy Policy), a private Snippet Vault, batch processing, and a programmatic API.

3. Accounts

• You need an account (email + password) for Pro features, the Snippet Vault, and API access. The free formatter itself doesn't require one.
• You're responsible for keeping your password secure and for all activity under your account. Tell us immediately if you suspect unauthorized access.
• You must provide a real, working email address — it's how we deliver password resets and account notices.
• You can delete your account at any time from Account → Profile. This is immediate and permanent (see the Privacy Policy for exactly what's deleted).

4. Subscriptions and billing

• The Pro plan is a recurring subscription billed through Stripe. Starting a subscription creates a real charge according to the pricing shown at checkout.
• You can manage or cancel your subscription any time from Account → Billing (the Stripe Billing Portal). Cancelling stops future charges; it doesn't retroactively refund the current billing period unless we say otherwise at the time.
• If a payment fails, we may downgrade your account to Free until it's resolved.
• Deleting your account cancels any active subscription as part of that process.

5. Acceptable use

You agree not to:

• Use the Service for anything illegal, or to process code you don't have the right to submit.
• Attempt to bypass rate limits, account lockouts, or Pro-plan gating (including sharing API keys or account credentials to get around per-account limits).
• Attempt to access another user's account, data, or Snippet Vault without authorization.
• Interfere with or disrupt the Service — including excessive automated requests intended to degrade it for others, beyond normal API use within your plan's limits.
• Reverse-engineer the Service beyond what's necessary for interoperability under applicable law, or resell API access without our agreement.

We may suspend or terminate accounts that violate this section.

6. Your code, and what we do with it

You own your code. We don't claim any ownership over anything you submit, format, or store in your Snippet Vault. You grant us only the limited, functional license needed to process your code for the specific feature you're using — formatting it, sending it to Google's Gemini API for an AI feature, or storing it because you saved it to your Vault. Don't submit code you don't have the rights to, or that contains someone else's confidential/proprietary information without authorization.

If you use the Snippet Vault's sharing feature, anyone with the link can view that snippet's code — don't share code you don't want publicly viewable that way.

7. AI features — a specific disclaimer

AI Optimize, AI Suggestions, and AI Analysis are generated by a language model, not a deterministic compiler. They can be wrong, incomplete, or introduce subtle behavior changes, despite the prompt instructing the model to preserve behavior. Review AI-generated changes before relying on them, especially for anything behavior-critical — the same way you'd review any code before shipping it, AI-assisted or not.

8. Service availability

We aim to keep the Service running reliably but don't guarantee uninterrupted availability. The free, client-side formatter keeps working even if our backend is temporarily down; sign-in, Vault, billing, AI features, and the API all depend on the backend and won't work during an outage. Check our status page for current, live-checked system status.

9. Disclaimer of warranties

The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We don't warrant that the Service will be error-free, that formatting or AI output will be perfect or bug-free, or that defects will be corrected.

10. Limitation of liability

To the maximum extent permitted by law, [Your Company Name] won't be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, profits, or revenue, arising from your use of the Service — including reliance on AI-generated code changes. Our total liability for any claim relating to the Service is limited to the amount you paid us in the 12 months before the claim arose (or $0 if you were on the Free plan).

11. Termination

You can stop using the Service and delete your account at any time. We may suspend or terminate accounts that violate Section 5 (Acceptable use), or discontinue the Service, with notice where reasonably practical.

12. Changes to these terms

If we make material changes, we'll update the date at the top of this page. Continued use of the Service after a change means you accept the updated terms.

13. Governing law

These terms are governed by the laws of [Your Jurisdiction], without regard to conflict-of-law principles.

14. Contact us

Questions about these terms? Email dhhutchenwork@gmail.com.