Legal

Privacy Policy

Effective date: 1 June 2026 · Last updated: 1 June 2026

explor.codes is currently in private beta. This policy describes how we handle your data now and how we intend to handle it at public launch. We will notify registered users of any material changes before they take effect.

1. Who we are

explor.codes ("we", "us", "our") is a Git hosting platform. When you use explor.codes — including our website, API, and related services (collectively, the "Service") — you trust us with your data. This Privacy Policy explains what we collect, why we collect it, how we use it, and your rights over it.

2. What we collect

2.1 Account information

When you register, we collect your username, email address, and a hashed version of your password (we never store your password in plain text). You may optionally provide a display name, bio, and avatar.

2.2 Repository data

We store the content of repositories you create or push to us, including code files, commit history, branches, tags, issues, pull requests, and comments. Public repositories are visible to anyone. Private repositories are visible only to you and collaborators you explicitly invite.

2.3 SSH keys

If you add SSH public keys to your account, we store those keys to authenticate Git operations. We never have access to your private key.

2.4 Usage data

We collect standard server logs including IP addresses, browser type, pages visited, timestamps, and HTTP status codes. This data is used for security, debugging, and aggregate analytics. We do not sell or share this data with third-party advertisers.

2.5 Cookies and sessions

We use strictly necessary cookies to maintain your login session. We do not use tracking cookies or third-party advertising cookies.

3. How we use your data

We do not use your code or private repository content to train machine learning models.

4. How we store and protect your data

Your data is stored on enterprise-grade cloud infrastructure with encryption at rest and in transit (TLS 1.2+). Passwords are hashed using bcrypt with a work factor of 12. Refresh tokens are stored as SHA-256 hashes — the raw token is never persisted. Access to production systems is restricted to authorised personnel only.

5. Data sharing

We do not sell your personal data. We share data only in the following circumstances:

6. Public content

Content in public repositories — including code, commit messages, issues, and comments — is visible to anyone on the internet and may be indexed by search engines. Think carefully before committing sensitive information to a public repository.

7. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal reasons. Repository data may remain in backups for up to 90 days after deletion.

8. Your rights

Depending on your location, you may have the following rights:

To exercise any of these rights, email us at privacy@explor.codes.

9. Children's privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected such data, we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date, and notify registered users by email for material changes. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at privacy@explor.codes.