Effective July 16, 2026
Codex Skins is designed to create and distribute themes without reading your Codex conversations, authentication tokens, cookies, local projects or source code. This policy explains the limited service data we do process.
Create a private draftWe process account identifiers, email address, encrypted session records, preferences, theme drafts you choose to save, uploaded or generated assets, order and entitlement records, support requests, abuse reports and limited security diagnostics such as timestamps, IP address and user agent.
The desktop sidecar is not designed to read or upload Codex chats, prompts, source repositories, project files, account cookies or credentials. A loopback debugging endpoint is used only by the local installer while a compatible theme is active.
Data is used to authenticate users, save requested work, produce and deliver theme packages, prevent abuse, provide support, enforce licenses and improve reliability. Private drafts are not public marketplace submissions.
Production account and business data is stored in a dedicated Cloudflare D1 database. Approved assets may be stored in a dedicated Cloudflare R2 bucket. Payment, email, analytics and image-generation providers are used only when configured and required for the feature you request.
Essential secure cookies maintain authentication sessions. Optional analytics are disabled unless configured. We do not intentionally send complete prompts, private upload URLs or account passwords to analytics providers.
Drafts and assets are retained while needed to provide the service or until deleted, subject to security, fraud, dispute, tax and legal-retention obligations. You may request account or asset deletion through the service support channel.
We use access controls, encrypted secrets, hashed passwords, scoped storage and least-privilege bindings. Internet services may process data in multiple regions; no system can guarantee absolute security.
You may keep work browser-local, avoid optional uploads, remove drafts, request access or correction, and object to non-essential processing where applicable. Do not upload third-party identity or franchise assets without permission.
Material changes will be reflected by a revised effective date. Privacy questions and rights requests can be submitted through the support channel linked from your account.