Legal
Privacy Policy
Last updated: 20 March 2026
The Codex is built to help you think better — not to harvest your data. This policy explains clearly what we collect, why, and how it's used. No legalese, no surprises.
Who we are
The Codex (thecodex.com) is an independent project based in Australia. If you have any questions about this policy, reach us via the contact form on the About page.
What we collect and why
Account information
If you create an account, we store your name and email address via Clerk (our authentication provider). This is used solely to save your work across sessions. We never sell or share this data.
Tool usage data
When you use tools like 7 Buckets or Two-Minute Reset, we store your inputs and results so they're there when you come back. Signed-in users have their data linked to their account. Guest sessions are not linked to any identity.
Breathing session data
When you complete a Two-Minute Reset, we record the number of cycles completed and, if you choose to respond, your mood reflection. For signed-in users this is linked to your account (including your email). For guests it is stored anonymously.
Contact form messages
If you use the contact form, your message and email are sent via Formspree to our inbox. We do not store these on our servers beyond what Formspree retains.
What we do NOT collect
We do not use advertising trackers, analytics pixels, or sell data to third parties. We do not use cookies beyond what is technically required for authentication (session tokens via Clerk). We do not track your behaviour across the web.
Third-party services
Clerk
Handles authentication. Your account credentials are managed by Clerk and are subject to their privacy policy (clerk.com/privacy).
Formspree
Handles contact form submissions. Subject to Formspree's privacy policy (formspree.io/legal/privacy-policy).
Database hosting
Your data is stored on Replit's managed PostgreSQL infrastructure, hosted on secure cloud servers.
Data retention
We retain your data for as long as your account is active. If you'd like your data deleted, use the contact form on the About page and we'll remove it within 7 days.
Your rights
You have the right to access the data we hold about you, request corrections, or ask for deletion. This service operates under the Australian Privacy Act 1988. To make any privacy request, use the contact form on the About page and we'll respond within 7 days.
Changes to this policy
If we make material changes to how we handle your data, we'll update the date at the top of this page. We won't notify you by email for minor changes.