Privacy Policy

Last updated: July 2, 2026

Summary

World Engine is designed with privacy as a core principle. Your source code never leaves your machine. We only collect what you explicitly give us.

What we collect

When you use the scanner: Nothing. The scanner runs entirely on your local machine. It reads only git metadata (commit history, file paths, contributor emails) and file structure. No source code is extracted or transmitted.

When you use the 3D viewer: Nothing is sent to our servers. The visualization runs entirely in your browser. Your scan data (the JSON file) stays on your machine.

When you submit the contact form: We collect your email address and store it in our database (Supabase, hosted in the EU) for the sole purpose of contacting you about World Engine. We do not sell, rent, or share your email with third parties.

AI Cartographer (optional): If you use the --no-ai flag, no data is sent externally. If you use the AI analysis feature, aggregated metadata (file counts, contributor statistics, domain structure) is sent to the Anthropic API for analysis. No source code or file contents are transmitted.

Data we do NOT collect

Source code or file contents
Passwords, secrets, or environment variables
Personal data beyond what you submit in forms
Analytics, cookies, or tracking pixels on the landing page
Browser fingerprints or device identifiers

Cookies

World Engine does not use cookies. The 3D viewer uses localStorage to remember your preferences (quality settings, understood nodes). This data never leaves your browser.

Third-party services

Supabase (EU) — stores lead form submissions
Vercel (US/EU) — hosts the website
Anthropic API (US) — optional AI analysis via the scanner (only metadata, no source code)
Google Fonts — font delivery (subject to Google's privacy policy)

Data retention

Lead form submissions are retained until you request deletion. Scanner data is never transmitted to us. localStorage data persists until you clear your browser data.

GDPR compliance

We are based in Denmark and comply with the EU General Data Protection Regulation (GDPR). You have the right to:

Access any personal data we hold about you
Request correction or deletion of your data
Object to processing of your data
Withdraw consent at any time

For B2B customers

If you scan a team repository, the scanner processes git metadata including contributor email addresses. These are used locally for visualization purposes and are included in the scan output JSON. As the person running the scanner, you are the data controller for this data. We recommend informing your team before scanning shared repositories.

The GDPR anonymization mode (--anonymize) replaces contributor identities with "Spirit 1", "Spirit 2", etc. in the output.

Contact

For privacy questions or data requests: anne@decodeai.dk

Decode AI
Denmark