Privacy Policy

Last updated: June 25, 2026

Our Privacy Promise

CodeKudo never reads your code, prompts, completions, file names, or project structure.

Your work stays private. We only track anonymous device IDs, timing data, and sponsor interaction events.

1. What We Never Collect

CodeKudo is designed with privacy as a core principle. We explicitly never read, collect, transmit, store, or inspect:

  • Source code
  • Prompt text
  • AI responses or completions
  • Chat history
  • File names or folder names
  • Repository names
  • Project structure
  • Terminal output or command contents
  • Environment variables
  • Secrets or API keys
  • Clipboard contents

2. What We Do Collect

To operate the CodeKudo developer rewards network, we collect minimal, non-private data:

  • Anonymous device ID (generated locally)
  • User ID (after you sign in with Google)
  • Email address (from Google OAuth)
  • Extension version
  • Editor type (VS Code, Cursor, CLI)
  • Surface (status bar, terminal, etc.)
  • Campaign ID when an ad is shown
  • Event type (impression, click, session start/end)
  • Timestamp of events
  • Visible duration of sponsor messages
  • Country and language (if provided for targeting)
  • Non-sensitive fraud detection metadata

3. How We Use Your Data

We use collected data solely for:

  • Authenticating your account
  • Tracking verified sponsor impressions and clicks
  • Calculating your earnings
  • Preventing fraud and abuse
  • Processing payout requests
  • Improving the CodeKudo platform

4. Authentication

CodeKudo uses Supabase Auth with Google OAuth. When you sign in, we receive your email address and Google user ID. We do not store your Google password or access your Google account beyond authentication.

5. Data Storage

All data is stored securely in Supabase (PostgreSQL) with encryption at rest and in transit. Access to your personal data is restricted by Row Level Security policies.

Extension tokens are stored locally in VS Code SecretStorage. We never transmit or store your complete auth session on our servers.

6. Data Sharing

We do not sell or share your personal data with third parties, except:

  • Anonymized aggregate statistics with advertisers (impression counts, click rates)
  • When required by law
  • With service providers necessary for platform operation (Supabase, Vercel)

7. Cookies

CodeKudo uses essential cookies for authentication session management. We do not use tracking cookies or third-party advertising cookies.

8. Your Rights

You have the right to:

  • Access your personal data
  • Request deletion of your account and data
  • Opt out by uninstalling the extension
  • Export your earnings history

9. Data Retention

We retain earnings and activity data for accounting and fraud prevention purposes. If you delete your account, personal identifiers are removed but anonymized earnings records are kept for legal compliance.

10. Children's Privacy

CodeKudo is not intended for users under 18 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or extension notification.

12. Contact

For privacy questions or to exercise your rights, contact us at: privacy@codekudo.com