Privacy
What qodebase stores: your email address and the name you choose; your Claude plan token or Anthropic API key, encrypted, used only to start Claude Code in your projects' containers; the projects, forks and agent conversations you create. Projects are public to read.
Private projects: only you see them on qodebase (the project, its code, its live app and its agents). Their code is still stored in this instance's Cloudflare account, so whoever runs the instance can technically read it; for code only you can reach, get your own qodebase.
Sign-in is handled by Cloudflare Access: with your Google account, or with a one-time code sent to your email. With Google, qodebase receives only your email address from Google, nothing else from your account. qodebase sets one cookie, to keep you signed in.
Visits are counted with our own analytics (kstats), sent to qodebase itself and not to a third party: the pages you open, the buttons and links you tap, the kind of device and the country. Your IP address is used once to make a visitor code that changes every day, and is not stored. No ad trackers.
The feedback form keeps your message, the page you sent it from, the kind of device, and your email only if you give one.
Talk (the voice bar): what you say is turned into text on Cloudflare (Workers AI). The sentence goes through Cloudflare's AI Gateway to the model that decides what to do (Workers AI) and the model that answers: Anthropic's Claude by default, Google's Gemini or a Workers AI model if you pick one or a daily limit is reached. Spoken replies are made on Cloudflare too. Nothing of it is kept unless you turn on Help improve Talk in Talk's settings (off by default): then the words you said, what Talk heard and decided, and what it did are kept for 14 days so we can make it better. Your voice recordings are never kept.
Your agents' requests go to Anthropic under your Claude plan or API key and Anthropic's terms. To delete your account and data, write to hello@kapps.dev.