Your data goes almost nowhere, by design.

The short version

CodeRunway has no registered accounts, no database, no analytics, and no advertising or tracking cookies. The sample workspace is open. If you choose the optional demo sign-in, one essential session cookie remembers the role you selected for this browser session. Your workflow state still lives in page memory and is discarded on refresh.

What stays on your device

One setting — your light or dark theme preference — is saved to your browser’slocalStorage so it survives a reload. It never leaves your device. You can clear it at any time through your browser’s site settings. Your plan, run, and verify state is held in page memory only and resets when the tab refreshes or closes. Signing out removes the demo session cookie.

The demo sign-in cookie

If you sign in, the server sets one cookie named coderunway-demo-session. It is HttpOnly, SameSite=Lax, limited to this site, and expires after eight hours. The cookie stores a signed role value only: user or admin, the internal value for the Judge role. It does not contain an email address, a name, a password, or a profile. Logging out deletes it immediately. There is no account database and no persistent history of who signed in.

What is sent to the model provider

When live mode is used, the server sends the fixed sample task and your approved plan to NVIDIA Nemotron through the Nebius Token Factory API to generate the plan and patch. Only the sample workspace content travels — CodeRunway has no way to read files, paste history, or personal data, so none can be sent. The API key is stored server-side and is never included in responses or shipped to the browser. Your IP address is visible to Nebius as the transport endpoint for that request, subject to Nebius’s own privacy policy.

Rate limiting

To bound provider usage, the server keeps an in-memory counter keyed by a hashed client IP address. The hash is not reversible, is not written to disk, and disappears when the app restarts. It is a safety guardrail, not an identity.

What CodeRunway never does

• No registered accounts, email collection, personal profiles, or marketing lists.
• No analytics, tracking pixels, or advertising networks.
• No persistent storage of sessions, plans, patches, or summaries in a database.
• No sale or sharing of any data with third parties.
• No reading of your local files, repository, or clipboard contents.

Changes and contact

If this policy changes, the date above will be updated and the change described in the repository history. Questions can be raised through the contact page or as issues on the public repository.