Privacy Policy

Last updated: June 2025

How CodeStorms Tools collects, uses, and protects your personal data.

1. Who we are

CodeStorms Tools is operated by CodeStorms. We are the data controller for personal data collected through this platform. If you have questions about your data, you can contact us via the contact channels listed at the bottom of this policy.

2. What data we collect

We collect the following categories of data:

Account data — name, email address, and hashed password when you register for an account.
Usage data — run history, tool usage counts, and plan information tied to your account.
Uploaded files — files you upload for processing. These are temporary (see section 4).
Technical data — hashed IP address and user agent string stored with each run for rate-limiting and abuse prevention.
Analytics data — page views and navigation patterns collected via Google Analytics 4 (see section 5).
Billing data — payment is processed by Stripe. We store only a Stripe customer ID; we never store full card details.

3. How we use your data

To process tool runs and deliver output files to you.
To manage your account and subscription plan.
To enforce rate limits and protect the platform from abuse.
To send transactional emails (account creation, run notifications, billing confirmations).
To understand how the platform is used so we can improve it (aggregated analytics only).

We do not sell your data, use your files to train machine-learning models, or build advertising profiles.

4. Data retention

Data type	Retention period
Uploaded input files	Deleted at run expiry (plan-dependent, typically 24 h – 7 days)
Output files	Same as input files
Run metadata (hashed IP, tool slug, status)	Deleted at run expiry
Account data (email, name)	Until you delete your account
Billing records	Retained for legal compliance (typically 7 years)
Analytics data (Google Analytics)	Per Google Analytics data retention settings (default 14 months)

5. Cookies and analytics

We use Google Analytics 4 to collect anonymised usage data. Google Analytics sets cookies in your browser to distinguish sessions and measure how pages are used. No personally identifiable information is included in analytics events.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by using a browser with tracking protection enabled.

6. Third-party processors

Stripe — payment processing. Stripe's privacy policy applies to payment data: stripe.com/privacy.
Google Analytics — aggregated usage analytics.
Cloud hosting provider — servers that process and temporarily store your files. Data is processed within the EU / EEA.

7. Your rights

If you are located in the EU/EEA (GDPR) or other applicable jurisdiction, you have the right to:

Access — request a copy of your personal data.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion of your account and associated data.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.
Restriction — request that we restrict processing in certain circumstances.

To exercise any of these rights, contact us using the details in section 8.

8. Contact

For privacy-related questions, data access requests, or account deletion, please contact us via the CodeStorms contact page. We aim to respond within 30 days.