Codebase

Privacy Policy

Last updated 17 October 2026

This policy explains how Codebase handles your personal data.

1. Who we are

Codebase is run by a private individual in Finland, who is the controller of your personal data. Contact: masg2735@gmail.com.

2. What we collect

  • Account: your email address and password, or the basic profile that GitHub or Google shares when you sign in with them (account ID, username, name, email address and picture).
  • Profile and content: what you add to your profile and what you create or share, such as projects, tasks, notes, messages and files. Other users can add data about you too, for example by inviting or mentioning you.
  • Activity: your online status, when you were last active and what you've read.
  • Technical data: the IP address and browser of your signed-in sessions, and our hosting providers' server logs.
  • Usage statistics: anonymous page-visit counts from Vercel Web Analytics, which uses no cookies.

3. Why we use it

  • To provide Codebase and its features to you (performance of a contract, GDPR Art. 6(1)(b)). An email address or a GitHub or Google account is needed to create an account.
  • To keep Codebase secure and to understand how it's used (legitimate interests, Art. 6(1)(f)).
  • To meet legal obligations, such as handling reports of illegal content (Art. 6(1)(c)).

4. Who receives it

  • Other users see your profile and what you share with them. Anyone with an invite link you created sees your name.
  • Our service providers: Supabase, Inc. (database, sign-in and file storage; your data is stored in Frankfurt, Germany) and Vercel Inc. (hosting and usage statistics).
  • GitHub, Google and GIPHY, when you use the features that rely on them. Content from other services, such as GIFs, profile pictures and link or YouTube previews, loads from those services, which receive your IP address.
  • Authorities, where the law requires it.

If you sign in with Google, we use your Google account ID, name, email address and picture only to create your account and show your profile.

5. Transfers outside the EU

Supabase and Vercel are based in the United States. These transfers are protected by the European Commission's Standard Contractual Clauses (Supabase) and the EU–US Data Privacy Framework (Vercel).

6. Security and retention

Your data is encrypted in transit and at rest. We keep it while your account exists. Deleting content or your account removes it, except copies of messages that others have forwarded. Sessions end when you sign out, and server logs and backups are deleted automatically after a short period.

7. Your rights

You can access, correct, delete and download your data, and object to or restrict its use. You can download your data and delete your account in Settings → Account; for anything else, contact us. You can also complain to a data protection authority, in Finland the Data Protection Ombudsman.

8. Cookies

Codebase only uses cookies and browser storage that it needs to work, such as keeping you signed in and remembering your preferences. These don't require consent.

9. Age

Codebase isn't intended for anyone under 16.

10. Changes

We'll post any changes here and update the date above. See also our Terms of Service.