Privacy Policy

• Email address, for license delivery and account access via magic-link login
• Payment information, processed by our payment provider acting as Merchant of Record. We do not store full card details ourselves.
• License activation data, including a hardware identifier (used to bind your license to your device) and activation timestamps
• Server logs, including IP address and user agent, for security and abuse prevention
• Affiliate referral cookies (if applicable), to attribute purchases to referring partners
• Discord account ID, only if you choose to connect Discord — we request nothing beyond your user ID and display name, and use it solely to assign your role in the Coda Discord server. Connecting is optional for customers and required for Promoter Program applicants, since approval grants a role. Disconnecting or deleting your account removes it.

• Contract performance: delivering your license, processing payment, providing customer support (Art. 6(1)(b) GDPR)
• Legal obligation: tax records and accounting retention (Art. 6(1)(c) GDPR)
• Legitimate interest: fraud prevention, abuse mitigation, license enforcement, service improvement (Art. 6(1)(f) GDPR)

All transfers outside the EU are protected by standard contractual clauses or equivalent safeguards.

• License and purchase records: kept as long as required by German tax law (10 years)
• Active session cookies: 30 days
• Affiliate referral cookies: 30 days (only set after consent)
• Cookie-consent record: 180 days
• Server logs: 90 days
• Magic-link tokens: 15 minutes (then deleted on use or expiry)

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data, subject to legal retention requirements
• Object to processing based on legitimate interest
• Data portability
• Lodge a complaint with a supervisory authority (in Germany: your state's data protection authority)

To exercise these rights, contact us at [email protected].

Strictly necessary

• coda_customer: stores your account session after magic-link login (30 days, HttpOnly)
• coda_consent: stores the outcome of the cookie-consent banner (180 days)

Optional (consent required)

• coda_ref: stores an affiliate referral code so a partner who referred you is credited if you later purchase (30 days). Set only after you click "Accept".

You can withdraw consent at any time by clearing the coda_consent cookie in your browser settings — the banner will reappear on your next visit.

We also use Plausible Analytics for aggregate visitor counts. Plausible is cookie-free, does not collect personal data, and does not require consent.