Privacy Policy

1. Who we are

CloudCode is a free online code editor with hosting, run and GitHub tools, operated by All Api Free. Questions or requests about your data: allapifree@gmail.com.

2. What we collect

• Account: your username, your password (stored only as a salted one-way hash - nobody can read it), the time you created the account, your last sign-in time and the time you accepted these terms. If you turn on two-factor authentication: an encrypted secret and hashed recovery codes.
• Your content: projects, files (including uploaded images/fonts), up to 25 saved versions per project, and your hosting / share-link settings.
• GitHub (only if you connect it): your GitHub numeric ID and username, and an access token (stored encrypted) that lets CloudCode import, push and deploy on your behalf. For auto-deploy, one webhook secret per project.
• Security log: sign-ins, failed sign-ins, password / 2FA changes, deployments and similar events, with the time and a shortened IP address (last part removed). Kept for 90 days.
• Temporary only: your full IP address is held in server memory to stop abuse (rate limiting). It is not written to the database.

3. Cookies and browser storage

One essential session cookie keeps you signed in (HttpOnly, SameSite, Secure on HTTPS, up to 30 days; it expires sooner if you are inactive for 14 days). Your browser also stores your settings (theme, language, font size), a backup copy of unsaved edits and cached app files so the editor works offline. We use no advertising, analytics or tracking cookies.

4. How we use your data

To run the service (sign-in, saving, running, hosting, GitHub deploys), to keep it secure (abuse prevention, security log) and to show service announcements. We do not sell your data, show ads, or use your projects to train AI models.

5. Public content - important

Anything you host (links starting with /s/) or share (links starting with /share/) can be opened by anyone who has the link. Never put passwords, API keys or other people's personal data in a project. Use Security & Privacy > Scan this project to check for secrets. Python apps you host run in a separate sandboxed runner service that has no access to the account database.

6. Services we rely on

• Hosting provider (the servers) and database provider (where data is stored), chosen by the operator.
• GitHub - only if you connect it. GitHub's own privacy policy applies to data on GitHub.
• jsDelivr CDN - the editor, Python runtime, formatter and ZIP library are loaded from it, so it can see your IP address.
• PyPI - when you search for or install Python packages.
• Code you write may itself load other websites; that is your responsibility.

7. How long we keep it

While your account exists. When you delete your account (Security & Privacy > Delete my account) your profile, projects, versions, hosting and GitHub token are removed immediately and we ask GitHub to revoke the token. Security-log entries become anonymous and disappear after 90 days. The database provider's backups may keep older copies for a limited time.

8. Your choices and rights

• Download everything we hold about you: Security & Privacy > Download my data.
• Edit your content any time; disconnect GitHub any time; delete your account any time.
• Depending on where you live you may also have the right to object, restrict processing or complain to a data-protection authority. Contact us at allapifree@gmail.com.

9. Security

Passwords are hashed, GitHub tokens and 2FA secrets are encrypted, cookies are HttpOnly and Secure, requests are protected against cross-site attacks, sign-in is rate-limited with account lockout, optional two-factor authentication is available, and hosted pages and user code run sandboxed. No system is perfectly secure - please report problems to allapifree@gmail.com (see /.well-known/security.txt).

10. Children

CloudCode is not directed at children under 13 (or the higher minimum age in your country). Younger learners should use it only with a parent or guardian.

11. Other things to know

Servers may be located outside your country. We will update this page when the service changes and announce important changes inside the app. The date above shows the latest version.