Public browsing and copying do not require an account. This version does not set visitor tracking cookies or collect full carts, purchased domain names, merchant accounts or payment information.
Administrator sign-in uses an HttpOnly session cookie valid for 8 hours. Rate limiting uses short-lived hashed identifiers; raw IP addresses are not stored in the business database.
Admin actions are audited. Gemini processes fetched public promotion text, not visitor shopping information. Cloudflare and Google process infrastructure requests under their applicable terms.
Operational logs and traces stored in Cloudflare are retained for up to 7 days, with access limited to service maintainers. We do not export them to another log store. Other provider security and billing records follow that provider's applicable policies.
Cloudflare Email Routing forwards incoming support email to our Gmail support mailbox. Resend delivers outgoing support email and processes addressing, message content and delivery metadata for that purpose under its applicable policies.
If you email hello@heycodes.app, we receive the information you choose to provide. Muma Tech deletes the support email copies it maintains, including trash, within 90 days after the issue is closed. Mail-provider backup handling follows the provider's policies. Please do not send passwords, payment information or complete carts.
Visitor behavior analytics and automatic extension reporting are not enabled. In environments with feedback enabled, an explicit submission contains a random report ID, merchant and offer IDs, offer and adapter versions, a selected purchase scenario and an outcome. Reports support manual review and never automatically pause offers. Reports leave review lists after 30 days and are cleaned up by daily maintenance, normally within 31 days. Preview feedback is disabled.