Draft · November 7, 2026. The controller's identity and contact details are placeholders. This notice is not complete until they are filled in.
Who is responsible
The controller for this website and requests sent to us is [Full legal name / company], [Postal address, country]. For privacy questions or requests, contact [Privacy contact email].
Visiting the website
The website is hosted by Vercel. Delivering a page necessarily involves technical request information, such as your IP address, requested URL, time of access and browser information. Vercel may process this information for delivery, reliability, security and abuse prevention.
The legal basis is our legitimate interest in operating a reliable and secure website under Article 6(1)(f) GDPR. Technical connection data is necessary to deliver the site. You do not need to create an account or provide a name to browse it.
The website code does not include advertising trackers, visitor analytics, embedded third-party media or tracking cookies. Its fonts and assets are served with the site. The star animation runs in your browser and is not sent to us as interaction data.
Feature wishes and GitHub
The wishlist fields stay in your browser until you choose “Continue on GitHub”. That action sends the title and description to GitHub in the request URL, where you can review them before publishing. The URL may also appear in your browser history. The website does not save the form to a Codebone database.
If you submit the issue on GitHub, its content and your GitHub profile are public. We use those suggestions and replies to discuss requests and improve Codebone, based on our legitimate interest under Article 6(1)(f) GDPR. Submission is voluntary. Never include secrets, private source code or sensitive personal information.
GitHub also processes connection and account information under its own Privacy Statement. App downloads and repository links also take you to GitHub.
Codebone on your Mac
The built-in analysis reads the project folders you select and stores source-derived architecture information in a local database. Settings, scan data and diagnostic logs are stored on your Mac. The website does not receive your project files or local graph just because you install or run the app.
Local app data is stored under ~/Library/Application Support/codebone and logs under ~/Library/Logs/codebone. To remove local data, use the app's removal tools or remove those files after quitting the app. Keep backups of anything you need.
“Local by default” does not mean every optional connection is offline. Update checks and downloads contact GitHub. Fetching repositories or model files contacts their respective hosts. If you configure a cloud model or connect a coding agent, that integration may receive relevant source and requests under its own settings and privacy terms. Review those before using a confidential project.
If you choose to share app feedback, review any diagnostics or log excerpts before posting them. Local files are not the same as a report you deliberately publish or send to support.
Contacting us
If you email us, we receive your address, message and any attachments you send. We use them to handle your request under Article 6(1)(f) GDPR, or Article 6(1)(b) where necessary for steps you request before entering a contract. Contact is voluntary; without a reply address we may be unable to respond.
The contact mailbox and its provider are [To be added when a contact email is set up]. There is currently no Codebone website account, payment form or newsletter signup.
Recipients, location and retention
Vercel processes website requests; GitHub processes downloads and feedback you choose to access there. Both may process data outside the European Economic Area, including in the United States. Vercel describes its transfer safeguards, including standard contractual clauses and applicable adequacy arrangements, in its Data Processing Addendum and Privacy Notice. GitHub describes its own safeguards in its Privacy Statement.
Technical data is retained for as long as necessary for delivery, security and investigation of incidents, subject to the hosting provider's applicable retention settings. The project's exact log retention and transfer arrangements are [To be confirmed for the hosting configuration].
Correspondence is kept until the request is resolved and any necessary legal retention or claim period has ended. Public issues may remain as project discussion history while relevant; deletion requests are assessed individually, and GitHub controls its own copies and retention. Local app data remains on your Mac until removed; diagnostic logs rotate as new logs are written.
Your choices and rights
Where the GDPR applies, you may request access, correction, deletion, restriction of processing and, where applicable, portability. You may object to processing based on legitimate interests for reasons relating to your situation. If processing is based on consent, you may withdraw that consent for future processing.
Use the privacy contact above to exercise your rights. You may also complain to a data protection supervisory authority, especially where you live, work or believe an infringement occurred. We do not use website data for automated decisions producing legal or similarly significant effects.
Keeping this notice current
Changes to hosting, feedback collection or future paid features will be reflected here. The date above identifies this version. A future account or checkout will need its own accurate data-handling information before it launches.