Privacy, in plain language.

This policy describes the current preview of Free Codex Apps. The owner must review it and supply any required operator and contact information before public launch.

Information you submit

Project submissions contain an original post URL, title, description, category and optional creator, app and repository links. Approved project information is public. Pending and rejected submissions are available only to the authenticated owner.

Private messages

Issue reports and sponsorship enquiries store your message, optional project link and reply email in the owner’s private inbox. No messages are automatically sent to a third party. Do not include information you do not want the owner to receive.

Storage and access

The server stores project information, messages, moderation history, salted owner password hashes and owner sessions in a local database. Protected backup copies can contain the same information. Owner password changes and database restores revoke existing sessions. Server hosting and backups have not yet been chosen for production. There is no automatic content-retention or deletion schedule in this version. Closing an inbox message does not delete it.

Cookies and request limits

Owner sign-in uses an essential session cookie that expires after eight hours. Visitors do not need accounts. To limit repeated submissions and login attempts, the server stores a hashed representation of the connecting IP address with a temporary request counter. Expired counters are removed on a later rate-limited request. Hosting providers may maintain their own access logs.

X embeds and external links

X content is loaded only when you choose “Load original X post.” Loading an embed connects your browser to X, which may receive network and device information and use its own storage under its policies. A do-not-track preference is passed to the widget. You can use the original source link instead. External apps and repositories have their own terms and privacy practices.

Analytics and contact

This version does not include analytics or advertising trackers. For an issue with your information or attribution, use the private report form. A reply email helps the owner follow up. Operator details and jurisdiction-specific requirements remain for the owner to review before launch.