Privacy Policy
Effective 8 Oct 2026 · Covers extension versions 1.1.0 and 1.2.0 (rolling out). This is a draft for lawyer review, not legal advice.
1. Who we are
CodeRa is developed and operated by Anton Zakharenka, an independent developer. Contact: hello@codera.click. For data protection purposes, Anton Zakharenka is the controller. CodeRa is not affiliated with Anthropic.
2. What we process and where it goes
| Action | What is processed | Where it goes |
|---|---|---|
| Capture / area / upload | Image, mode (text/code/understand), browser language | CodeRa relay → Anthropic API |
| Understand mode | Same, with explain-style processing | CodeRa relay → Anthropic |
| Follow-up / language conversion | Snippet text + question or target language, rendered as an image and sent as imageData | CodeRa relay → Anthropic |
| Collect whole lesson | Many frames while collection is on | CodeRa relay → Anthropic |
| Lecture summary from library | Snippets and, if you run it, the page title inside the rendered prompt | CodeRa relay → Anthropic |
| Bracket check, library search, filters | Nothing is sent | Stays in your browser |
| Export GitLab / Notion / Obsidian / Anki | The snippet you export | Only to that service when you press export |
| Waitlist form | Email address | FormSubmit → developer inbox |
| Visiting codera.click | Standard server logs (IP, user agent, URL, time) | Hosting provider for the site |
3. How a request travels
When you extract, the extension posts to CodeRa's relay at https://codera.click/api/extract, which forwards the request to Anthropic's API and returns the result. The relay lets CodeRa work without putting a shared Anthropic key inside every installation.
Verified from the extension code: the JSON body contains imageData (PNG/JPEG/WebP data URL), extractionMode and locale. It does not contain the page address, cookies, browsing history, your name or your email as separate fields. The page address, title and timestamp are used only inside your browser to label snippets, except a lecture summary may include the page title inside the rendered prompt image.
Images can contain more than code: other windows, notifications, names. Crop to the code and do not capture secrets.
4. What the relay keeps
We do not operate a user-facing cloud library of your screenshots. The relay may keep request metadata (for example time, IP address, request size, status code) only as needed for abuse prevention, rate limiting and reliability. Exact retention windows for infrastructure logs depend on the host configuration and should be confirmed with your hosting setup. We do not use extract payloads for advertising or profiling.
5. Anthropic's role
Anthropic processes the images and prompts to generate the result. Under Anthropic's Commercial Terms as they stand today, Anthropic does not train its models on customer content from its API by default. How long Anthropic retains API data is set by Anthropic and may change, so we do not state a fixed number here. See Anthropic's Privacy Policy and its current commercial and data-processing documentation. Anthropic may process data in the United States and other regions it documents.
6. What is stored on your device
Your snippet library, history, settings, an optional Anthropic API key (if you add one) and export tokens such as GitLab are stored in your browser (chrome.storage.local and IndexedDB). They are not uploaded to a CodeRa cloud library. Removing the extension or clearing its data deletes them. Today the default extract path uses the CodeRa relay; if you supply your own key in settings, follow the in-extension instructions for how that key is used.
7. Exports
Exports happen only when you press the export button. For services that need sign-in, access tokens are stored locally in your browser. Once content reaches GitLab, Notion, Obsidian or Anki, that service's own terms and privacy policy apply.
8. Waitlist and email
If you join the waitlist, your email is delivered through FormSubmit to the developer's inbox and used only for product updates and pricing announcements. Your consent is the legal basis. You can unsubscribe or ask for deletion at any time at hello@codera.click.
9. The website and cookies
codera.click and the relay may produce standard server logs (IP address, user agent, URL, time) for security and reliability. We use no advertising cookies or trackers on the marketing pages today. If cookieless analytics (for example Plausible or Umami) are added later, they will be named here.
10. Legal bases (where GDPR applies)
We process extract requests to provide the function you ask for (performance of a contract) and in our legitimate interest in operating and securing the Service. We process waitlist email on the basis of your consent.
11. Retention
- Images and results at the CodeRa relay: not kept as a user library.
- Relay / host request metadata: only as needed for abuse prevention and operations (confirm host retention).
- Data at Anthropic: according to Anthropic's current terms.
- Local library, history, settings: until you delete them or uninstall.
- Waitlist email: until you unsubscribe or ask for deletion.
12. Your rights
Where GDPR or similar laws apply, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to withdraw consent, and to data portability. Write to hello@codera.click. You can also complain to a supervisory authority in your country.
13. International transfers
Anthropic and some infrastructure providers operate outside the European Economic Area. Transfers rely on the safeguards described in their data-processing terms, for example standard contractual clauses.
14. Security
Traffic uses HTTPS. The relay applies limits to reduce abuse. No system is perfectly secure, so avoid capturing secrets and crop to the code.
15. Chrome permissions explained
- activeTab — access the current tab when you start a capture.
- scripting — inject the selection overlay, floating button, hotkey handler and notifications.
- clipboardWrite — copy results, including marked snippets for editors.
- storage — save preferences, the local library and optional keys or tokens.
- Host access —
<all_urls>for capture on pages you use, andhttps://codera.click/*for the extract relay and site pages (per the current manifest).
16. Sub-processors and services
Anthropic (AI processing) · hosting provider for codera.click and the relay · FormSubmit (waitlist email delivery) · optional export targets you choose (for example GitLab, Notion).
17. Children
CodeRa is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children.
18. Changes
We will update this policy when the product or the law changes. The effective date above will change. Material changes will be announced on the site or by email to waitlist subscribers.