Privacy Policy

We keep this to what actually runs the product:

• Account: your email address, a securely hashed password (if you use one), and — if you sign in with Google, Discord or Apple — the identifier those providers share so we can recognise you.
• Profile: your handle, display name, an avatar image you choose to upload (stored on our CDN), and an optional bio.
• Games & content: the prompts you type, the game code and AI-generated art and audio produced from them, plus captions, comments (including their edit history), likes, saves, shares and who you follow.
• Usage: basic technical data such as device and browser type, pages you visit, actions you take, and an approximate location derived from your IP address — used to keep the service working, safe and improving.
• Cookies: a session cookie and a language cookie (see “Cookies” below).

We use your information to:

• Build the games you ask for and run the studio, the public feed, and remixing.
• Show your profile and public content to other people, the way you publish it.
• Keep Codply safe: moderation, spam and abuse prevention, and fraud detection.
• Send you transactional email you need — sign-in links, password resets, and important account or security notices.
• Understand what works and fix what doesn’t, so the product gets better.
• Meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

When you generate or remix a game, your prompt and the relevant context are sent to AI model providers that build the game, and to art and audio providers that create its sprites, backgrounds and sound. Prompts are also screened by an automated moderation step to catch abuse.

These providers process this data on our behalf under contract, to deliver the feature you asked for — not to advertise to you. We do not sell your prompts or content.

Every generated game itself runs in a locked-down sandbox that makes zero network calls: a game you play can’t phone home, read your cookies, or reach the outside internet.

We use two first-party cookies, and no more:

• A session cookie (fp_token) that keeps you signed in. It’s httpOnly, so it can’t be read by scripts in your browser.
• A locale cookie (fp_locale) that remembers whether you prefer English or Arabic.

We do not use third-party advertising or cross-site tracking cookies.

We share data only with the categories of service providers (“processors”) that make Codply run, each under a contract that limits them to our instructions:

• AI model providers, for game generation.
• Image, art and audio providers, for generated assets.
• Email delivery, for transactional messages.
• OAuth identity providers, when you choose to sign in with Google, Discord or Apple.
• Hosting and CDN, to serve the app, your avatar and published games.
• Payment processing (planned), if and when paid plans and creator payouts go live.

We may also disclose information to comply with the law, protect people’s safety and our rights, or as part of a merger or sale of the business (you’ll be told first). Content you publish — your games, profile and comments — is public by design. We never sell your personal data.

Wherever you are, you can:

• Access and get a copy (export) of your data.
• Correct information that’s wrong, from your account settings.
• Delete your account and your content.
• Object to or restrict certain processing, and withdraw consent where we relied on it.

Manage most of this in your account settings, or contact us and we’ll help. We’ll respond within the time the law requires, and we won’t charge you for exercising these rights or treat you differently for doing so.

Codply is for people aged 13 and over — or 16 and over where local law sets a higher age for online services. We don’t knowingly collect personal information from children under those ages. If you believe a child has given us their information, contact us and we’ll delete it.

We keep your information for as long as your account is active. When you delete your account we delete or anonymise your personal data within a reasonable period, except where we must keep certain records longer — for example financial and payment records for tax and accounting, or logs needed to resolve disputes and prevent abuse.

Published games are immutable by design: once a version is live, that version’s files don’t change. Editing or rolling back a game creates a new version rather than altering the old one.

We protect your data with encryption in transit, hashed passwords, sandboxed game execution, and least-privilege access to our systems. No online service can promise perfect security, but we work hard to earn your trust and to respond quickly if something goes wrong.

Codply and our providers may process your information in countries other than your own. When we do, we rely on appropriate safeguards to protect it, consistent with this policy and applicable law.

We may update this policy as Codply grows. When changes are material we’ll update the date at the top and, where appropriate, let you know in the app or by email. Continuing to use Codply after an update means you accept the revised policy.

Questions about your privacy, or want to exercise a right? Email us at privacy@codply.com and we’ll get back to you.