CodeFetch ("we", "us", or "our") is operated by Everything Cloud. This policy explains what data we collect when you use the CodeFetch service — including the web app at app.codefetch.io, the CLI tool, the VS Code extension, integrations (Confluence, Obsidian, Joplin, MkDocs), and the shared-link service at codefet.ch — and how we use it.
1. What we collect
Account data
When you create a CodeFetch account we collect your email address and a hashed password. We use this solely to authenticate you and to send transactional emails (password reset, account notices).
Script and file content
When you publish a script or file through CodeFetch it is stored on our servers so it can be retrieved by the codefetch get command or a shared link. Content you mark as private is accessible only with your credentials. Content you publish as a shared link is accessible to anyone who holds that link.
Shared links (codefet.ch)
Shared links are processed by our URL-shortening service. Slug keys are stored as SHA-256 hashes and link targets are encrypted with AES-256-GCM at rest. We log the creation timestamp and the tenant account that created the link; we do not log who clicks a link.
Usage data
We collect minimal server-side logs for security and reliability purposes: IP address, request path, HTTP status code, and timestamp. These logs are retained for 30 days and are not used for advertising.
CLI and extension telemetry
The CodeFetch CLI and VS Code extension do not collect telemetry by default. If a future version introduces optional telemetry it will be opt-in and clearly documented in the release notes.
2. How we use your data
- To provide and operate the CodeFetch service
- To authenticate requests and enforce access controls
- To send you transactional emails you explicitly trigger (e.g. password reset)
- To diagnose errors and maintain service security
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in section 3.
3. Third-party services
We use the following sub-processors to operate the service:
- Cloudflare — hosting, CDN, and Workers runtime. Content transits and may be cached on Cloudflare's network.
- Cloudflare KV / R2 — data storage for scripts, shared links, and account data.
Each sub-processor is bound by their own data processing agreements. We do not use analytics platforms, advertising networks, or social tracking pixels.
4. Data retention
- Account data — retained until you delete your account.
- Published scripts — retained until you delete them or your account is deleted.
- Shared links — retained until you revoke them or your account is deleted.
- Server logs — retained for 30 days, then deleted automatically.
5. Your rights
You may at any time:
- Access the data we hold about you
- Delete your scripts, shared links, or account from within the app
- Request a copy of your data or ask us to delete it entirely
To exercise these rights contact us at privacy@codefetch.io.
6. Security
All data is transmitted over TLS. Shared-link targets are encrypted at rest. Passwords are stored as salted hashes and never in plaintext. We review our security posture regularly.
7. Children
CodeFetch is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has created an account please contact us and we will delete it promptly.
8. Changes to this policy
If we make material changes we will update the effective date above and, where practical, notify registered users by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
9. Contact
Questions about this policy? Email us at privacy@codefetch.io.