Privacy Policy

This policy applies to codefe.cn and the *.codefe.cn products operated by CodeFE. CodeFE is operated by an independent developer.

Data practices vary by product. Each product may describe the scope of browser storage, automatic sync, intentional uploads, or public features; the more specific product notice applies to that feature.

We process only the information needed to provide features, maintain security, and improve the services. This may include:

• Account information: your registration email and any display name, avatar, language, or source information you choose to provide. Password authentication is handled by Supabase Auth; CodeFE applications do not store your plaintext password.
• Account product data: when you sign in and use a corresponding cloud feature, this may include progress, records, bookmarks, comments, leaderboard scores, workspace content, or product settings.
• Public content and uploaded files: such as comments, guestbook messages, posts, reports, avatars, or product images you intentionally submit. Visibility follows the notice shown when you submit the content.
• Technical and access data: such as page paths, referring pages, access times, browser and device categories, approximate region, and request or error logs needed to secure the services.

Many CodeFE tools work without signing in. In that case, business data is generally stored only in your current browser. Clearing browser data or changing browsers or devices may make it unrecoverable.

After you sign in, some products automatically sync the local data needed to provide account cloud features, as described by that product. Sync scope and cloud capabilities vary by product; other uploads, public submissions, leaderboards, interactions, or collaboration data are sent only when you use the corresponding feature.

Features that require server-side computation are exceptions. For example, model-powered features send the input needed for the current request to codefe-api and the configured model provider. A signed-out request does not create a guest account. Features involving additional sensitive data provide an appropriate notice.

We may use information to:

• Provide registration, sign-in, email verification, password reset, and profile management.
• Provide local enhancements and cloud features that a product describes as automatic or that you actively use, including sync, backup, leaderboards, comments, bookmarks, and collaboration.
• Moderate content, review reports, prevent abuse, and maintain service security.
• Diagnose errors, improve performance, and understand anonymous, aggregate website traffic.
• Send necessary service emails such as sign-in or registration codes, password reset, and security notices.

CodeFE uses the following browser storage and analytics mechanisms:

• Authentication cookies maintain your signed-in session across codefe.cn subdomains and use necessary security attributes.
• localStorage or sessionStorage may store theme and language preferences, product settings, and browser-local product data. The scope of local data before and after sign-in follows each product’s description. You can clear this data through your browser settings.
• Umami: we self-host Umami at analytics.codefe.cn for anonymous, aggregate traffic analytics. Umami does not use persistent analytics cookies, is not used for advertising profiles, and analytics data is not sold to advertising networks.

Current analytics help us understand page visits and overall usage. They are not used to create guest accounts or associate browsing activity with Supabase account IDs.

We may use Supabase for account authentication, self-hosted codefe-api and PostgreSQL for business data, Tencent Cloud COS for files you intentionally upload, and email, model, HIBP, or content-delivery providers for specific features.

We send providers only the data needed for the requested feature. We do not sell personal information or provide it to third-party advertising networks. Infrastructure and service providers may process data in regions where they operate, so we do not claim that every category of data always remains in one geographic region.

We retain information for as long as needed to provide features, maintain security, or meet applicable obligations. We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security.

• You control browser-local data and may clear it through product controls or browser settings.
• Signed-in users can use the editing, deletion, and visibility controls offered by each product. Available controls vary by product.
• To request access, correction, or deletion of your account and related data, contact us at the address below. We may verify account ownership before processing a request.
• Deletion may be reasonably delayed by backup rotation, dispute handling, or applicable legal requirements. We will explain any data that cannot be deleted immediately and why.

We recommend guardian supervision when minors use educational, game, or motion-based products. Do not submit a child’s real identity, contact details, or other unnecessary information in public comments, posts, or input fields.

We may update this policy as products or legal requirements change. We will update the date on this page and provide reasonable notice of material changes.

For questions about this policy, our data practices, or a data-rights request, contact us at: