Privacy Policy

Introduction

Playcode ("Playcode," "we," "us," and "our") provides an online javascript playground allowing our users to write, run, share, and experiment with code. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use and share your personal information and to assist you in exercising the privacy rights available to you.

Scope

This Privacy Policy covers the personal information we collect about you when you use our products or services, or otherwise interact with us, including on our website at playcode.io, mobile applications ("Apps"), and our related online and offline offerings (collectively, the "Services"). This policy also explains your choices surrounding how we use your personal information, which include how you can object to certain uses of the information and how you can access and update certain information.

1. Personal Information We Collect

We collect personal information when you provide it to us, when you use our Services, and when other sources provide it to us, as further described below.

A. Information You Provide to Us

  • Account Creation: When you create an account or otherwise use the Services, we collect information such as your name, email address, role within your team or enterprise, and an optional profile photo.
  • Your Communications with Us: We collect personal information from you such as email address, or mailing address when you request information about our Services, register for our newsletter, request customer or technical support, or otherwise communicate with us.
  • Payment Information: When you choose to subscribe for Personal, Team, or Enterprise plans on the Services, we will collect payment information allowing you to pay us.
  • Surveys: We may contact you to participate in surveys. If you decide to participate, you may be asked to provide certain information which may include personal information.
  • Interactive Features: We may offer interactive features such as forums, blogs, chat and messaging services, and social media pages.
  • Registration for Sweepstakes or Contests: We may run sweepstakes and contests. Contact information you provide may be used to inform you about the sweepstakes or contest and for other promotional purposes.
  • Conferences, Trade Shows, and Other Events: We may attend conferences, trade shows, and other events where we collect personal information from individuals.
  • Job Applications: We may post job openings and opportunities on the Services.

B. Information Collected Automatically

We keep track of certain information about you when you visit and interact with any of our Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile carrier, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information, and other information about how you use the Services.

We, as well as third parties that provide content, advertising, or other functionality on the Services, may use cookies, pixel tags, local storage, and other technologies to automatically collect information through the Services.

C. Information from Other Sources

We may obtain information about you from other sources, including through third-party services and organizations.

2. How We Use Your Information

We use your personal information for a variety of business purposes, including to:

  • Provide the Services or requested information
  • Serve administrative purposes
  • Market our products and services
  • With your consent for other disclosed purposes
  • Create de-identified and aggregated information
  • Process information on behalf of our customers

Sub-processors

We use the following service providers (sub-processors) to run the Services. Each one receives only the data it needs for the purpose listed. The location in brackets is where the provider processes the data or, when the provider does not name a processing location, where it is based.

Hosting and infrastructure

  • Hetzner (Germany, Finland): servers, databases and storage for Playcode and for apps hosted on Playcode Cloud. Your account, projects and databases are stored here.
  • Cloudflare (USA, global network): DNS, content delivery and protection for all web traffic, including bot protection at sign-in.
  • Amazon Web Services (Ireland, Germany, USA): email delivery (Ireland and Germany), file storage (Ireland) with worldwide delivery through CloudFront, and off-site backups (USA).

AI models

When you use the AI assistant, your prompts, code, files and chat history are sent to the provider of the model that handles the request.

  • Anthropic (USA): Claude models, the default for the Pro and Ultra tiers. Also the models behind Playcode AI for apps hosted on Playcode Cloud.
  • Google Cloud Vertex AI (global, including USA): Gemini models, the default for the Fast tier; summaries of long chats; image and video generation.
  • OpenAI (USA): GPT models when you select them, image generation, and transcription of voice input.
  • xAI (USA): Grok models, only when you select them.
  • DeepSeek (China): DeepSeek models, only when you select them.
  • Moonshot AI (Singapore): Kimi models, only when you select them.
  • Z.ai (Singapore): GLM models, only when you select them.
  • Alibaba Cloud (Singapore): Qwen models, only when you select them.

Tools used by the AI assistant

  • Tavily (USA): web search and page reading.
  • DataForSEO (Estonia): SEO data such as keywords, rankings and backlinks.
  • ElevenLabs (USA): music, sound effects and voice-over generation.

Payments, support and analytics

  • Stripe (Ireland, USA): payments, subscriptions and invoices.
  • Crisp (France): support chat.
  • PostHog (EU): product analytics and session recordings.
  • Google (USA): Google Analytics and Google Ads measurement and fonts (Google Fonts) on our websites, and our team email (Google Workspace).
  • Telegram (United Arab Emirates): internal notifications to our team, for example when you buy expert help or send feedback.

Some providers process data under their own terms when you choose to use them. If you connect a third-party account to your workspace, the connection provider (currently Notion (USA) and Google (USA)) processes data as described in the "Connected Accounts and Google User Data" section below; content you ask the AI assistant to use from a connected account is sent to the AI model provider that handles the request. If you sign in with Google, GitHub or Microsoft, that provider confirms your identity. If you register a domain through Playcode, your registration details go to our registrar, Tucows (OpenSRS, Canada), and to the registry of the domain, as ICANN rules require.

3. Disclosing Your Information to Third Parties

We may share your personal information with the following categories of third parties:

  • Service Providers
  • Business Partners
  • Affiliates
  • Advertising Partners
  • Other users in shared workspaces
  • Enterprise administrators
  • To comply with legal obligations
  • In the event of merger, sale, or other asset transfer

If you connect a third-party account (such as Notion or Google), we exchange data with that provider as necessary to provide the connection you requested. Google user data is not shared with third parties except as needed to provide the feature you requested, with your consent, or where required by law. See "Connected Accounts and Google User Data" below.

4. International Data Transfers

We store your account, projects and databases in the European Union, on servers in Germany and Finland. Some of the providers listed in section 2 process data in other countries:

  • United States: AI model providers (Anthropic, Google, OpenAI and xAI), Cloudflare, Tavily, ElevenLabs, Stripe, Google services, and our off-site backups at Amazon Web Services.
  • China and Singapore: only when you select a DeepSeek, Kimi, GLM or Qwen model.
  • United Arab Emirates: internal team notifications (Telegram).
  • Canada: domain registrations (Tucows).

When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and their UK and Swiss equivalents) in our providers' data processing terms where the provider offers them, or on the EU-US Data Privacy Framework where the provider is certified under it. If you are in the United States, your information is processed in the United States and in the European Union. These countries may have data protection laws that are different from the laws where you live.

5. Your Choices

You may have the right to object to or opt out of certain uses of your personal information. Where you have consented to the processing of your personal information, you may withdraw that consent at any time by contacting us as described below.

You can opt out of receiving unwanted emails, push notifications, and personalized advertisements through your device settings or by following the unsubscribe instructions provided in communications.

6. Your Privacy Rights

Depending upon your location and in accordance with applicable laws, you may have the right to:

  • Access personal information about you
  • Request correction of your personal information
  • Request deletion of your personal information
  • Request restriction or object to processing of your personal information
  • Not be discriminated against for exercising your privacy rights

7. Data Retention

We store the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

8. Security of Your Information

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us.

9. Third-Party Websites/Applications

The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact.

10. Children's Information

The Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children.

11. Supervisory Authority

If you are located in the European Economic Area or the UK, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

12. California Privacy Notice

This Privacy Notice applies to California consumers and supplements the Privacy Policy.

California Shine the Light Law: The California "Shine the Light" law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year.

California Consumer Privacy Act (CCPA): In the preceding 12 months, we have not disclosed your personal information to any third party in a manner that would be considered a sale under the CCPA.

13. Connected Accounts and Google User Data

The Services may allow you to connect third-party accounts (such as Notion, Google Search Console, Gmail, and Google Calendar) to your Playcode workspace. This section describes how we handle data from connected accounts, including data received from Google APIs ("Google user data").

A. What We Access

When you connect an account, we access only the data covered by the permissions (scopes) you grant on the provider's consent screen. The consent screen lists the specific permissions requested for each provider before you approve the connection.

B. How We Use Connected Account Data

We use data from a connected account only to provide the features you request, for example reading a document you asked the Playcode assistant to use, or sending an email you asked to send. We act on a connected account only at your direction. We do not sell connected account data, we do not use it for advertising, and we do not use it to train generalized artificial intelligence or machine learning models.

C. How We Store and Protect Credentials

The access and refresh tokens for a connected account are stored encrypted at rest using AES-256-GCM. The raw credential is never shown to or shared with the AI model: requests to the provider are executed server-side, and the model receives only the results. If an app you build on Playcode needs access to a connected account, it receives only a short-lived access token and calls the provider directly; long-lived refresh credentials never leave our servers.

D. Sharing

We do not share connected account data, including Google user data, with third parties, except as necessary to provide or maintain the feature you requested, with your consent, or as required by applicable law. We do not allow humans to read this data except with your explicit permission, where necessary for security purposes, or to comply with applicable law.

E. Your Control: Disconnecting

You can disconnect a connected account at any time from your workspace settings. Disconnecting revokes Playcode's access and permanently deletes the stored tokens for that connection. For Google accounts, you can also revoke Playcode's access from your Google Account security settings at https://myaccount.google.com/permissions.

F. Google API Services User Data Policy

Playcode's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain language: Google user data is used only to provide the features you request, is not sold, is not used for advertising, and is not used to train generalized AI or machine learning models.

14. Changes to Our Privacy Policy

We may revise this Privacy Policy from time to time in our sole discretion. If there are any material changes to this Privacy Policy, we will notify you as required by applicable law. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use the Services after the new Privacy Policy takes effect.

Contact Us

If you have any questions about our privacy practices or this Privacy Policy, please contact us at:

Playcode.io
Email: ruslan at playcode.io

Effective Date: September 11, 2026