Privacy Policy

This policy explains what data CodeArbiter collects and who controls it. CodeArbiter is one of several early-stage products built and operated by AppTechLab, which acts as the data controller for all of them.

Who controls your data

AppTechLab (apptechlab.com) is the data controller for information collected through this page, not CodeArbiter individually. This gives you one place to ask about, correct, or delete your data across every AppTechLab product.

What we collect

• Email address — only if you submit the "Reserve early access" form, together with a timestamp and the consent you gave at signup. If you also enter a primary language/stack, that text is stored linked to your signup row and deleted automatically if that row is deleted.
• Live-demo activity log — every review you run through the "Run adversarial review" box is recorded as one row with a timestamp, an issue-count, and a top-severity label. The pasted code, the generated code, and the critique's notes are never written to that log — only the verdict shape. A rough estimated cost in USD is recorded for that request.

What we don't collect

No cookies are set by this page. No third-party advertising or tracking pixels are loaded. No payment information is collected — this page has no live payment processing. Your IP address is never stored in readable form; it is hashed with a server-side secret salt before being used to enforce the demo's rate limit, and that hash is not linked to your email or to any activity-log row.

About the live demo specifically

Code you paste into the demo, together with your instruction, is sent to Google's Gemini API twice — once to a faster tier to generate the change, once to a second, independent pass to critique it — do not paste anything you would not want a third-party AI provider to process, and never paste real credentials or secrets. Neither the pasted code nor either model's response is stored server-side; both exist only in memory for the duration of your request.

How we use it

Your email is used to notify you when CodeArbiter opens for self-serve access, and occasionally about other AppTechLab developer tools. It is never sold or shared with third parties.

Your rights

You can ask AppTechLab to access, correct, or delete your data at any time by emailing the contact address on apptechlab.com, or by calling POST /api/delete-account with your email and the deletion code shown when you signed up — this removes your signup record (and any stack/language note attached to it) and logs a one-way hash of the deletion for audit purposes only. The code is only ever shown once, at signup, so that knowing someone else's email address alone is not enough to delete their data; if you lose it, use the email option instead. As part of AppTechLab's data retention policy, data belonging to a discontinued product is deleted within 30 days of that product's retirement.

Storage

Data is stored with Supabase, our database provider. Your email address is only ever written by our server, through the "Reserve early access" endpoint, which validates and rate-limits every submission before it reaches the database — this page's own browser code cannot write to the signup table directly. The live-demo activity log has no public read or write access at all; only the server-side review function can write to it, and only the server-side dashboard endpoint can read from it (and only returns the verdict shape + minute- rounded time, never a full row or the underlying code).