Privacy policy
Effective date: October 31, 2026
This page explains what happens to your personal data when you visit iocodo.com or send us one of its two forms. Each of our apps has its own privacy policy, linked from that app's pages.
1. Who we are
iocodo.com is the website of IOCODO LLC, a limited liability company registered in Wyoming, United States. We decide why and how the data described on this page is used, so under European data protection law we are its controller.
- Postal address
- 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
- support@iocodo.com
- Data protection
- The person in charge is the Managing Member of IOCODO LLC. Our other contact details are on the Contact page.
Use this email for anything about your data, including the requests described in Your rights.
2. What this policy covers
This policy covers the company pages of iocodo.com:
- the home page and its project form
- All apps (iocodo.com/apps/) and our service pages (iocodo.com/services/)
- Contact, the form for reporting illegal content, the transparency report, the Impressum and this page
The pages of each app under iocodo.com/apps/ are covered by that app's own privacy policy.
Here, "personal data" means any information about you as a person who can be identified, directly or indirectly.
3. Data that stays in your browser
When you pick a language, the site saves your choice in your browser's storage, so the next page opens in that language. It is not sent to us.
4. What we use data for, and on what legal basis
Showing you the site
Data: your IP address and the request itself: the address of the page or file, and the name and version of the browser that asks for it.
Legal basis: our legitimate interests (GDPR art. 6(1)(f)): delivering the pages you ask for and keeping the site working and secure.
Counting visits
On the home page, All apps, the service pages and the page shown for an address that does not exist.
Data: the address of the page, the page you came from, how long the page took to load, your browser and operating system, and your IP address, which Cloudflare receives with the request.
Legal basis: our legitimate interests (GDPR art. 6(1)(f)): knowing how many people visit these pages and how fast they load. Visitors in Germany are not counted. You can object at any time by writing to us.
Answering a project request
When you send the project form on the home page.
Data:
- what you write in the form: your name, email address, project name, project type, platforms, description and, if you choose, how you found us
- the referral code in the link that brought you to the site, if there was one
- the description of your browser and operating system that your browser sends
- a code computed from your IP address, which cannot be turned back into the address; we use it only to limit how many forms one sender can send in a short time
Legal basis: steps you ask us to take before a possible contract (GDPR art. 6(1)(b)). For the code computed from your IP address, our legitimate interests (art. 6(1)(f)): protecting the form from abuse.
Handling a report of illegal content
When you send the reporting form.
Data:
- what you write in the form: the app or website, where the content is, why you think it is illegal, your name and email address (optional if the report is about the sexual abuse of a child), and your answers to the form's questions
- the language of the form, and the reference number we give your report
- the description of your browser and operating system that your browser sends, and the code computed from your IP address described above
Legal basis: our legal obligations to receive and act on reports of illegal content (GDPR art. 6(1)(c)). For the code computed from your IP address, our legitimate interests (art. 6(1)(f)): protecting the form from abuse.
Answering you when you write to us
Data: your email address, your message and anything you attach.
Legal basis: our legitimate interests (GDPR art. 6(1)(f)): answering your request, and keeping a record of how we handled it. You can object at any time by writing to us.
5. Who receives data
We use these service providers to run iocodo.com. Each one receives only the data listed, for the purpose listed:
- Firebase Hosting (Google LLC)
- Serves the site. It receives your IP address and the request itself.
- Cloud Functions for Firebase and Cloud Firestore (Google LLC)
- Receive and store what you send through the project form and the reporting form.
- Cloudflare Web Analytics (Cloudflare, Inc.)
- Counts visits to the pages listed in Counting visits, for visitors outside Germany.
- GoDaddy Professional Email (GoDaddy Operating Company, LLC)
- Receives and keeps the emails you send to our addresses at iocodo.com, and our replies.
- IT service providers (United States)
- Tools we may use to read what you send us and to draft our replies. They receive the text of your email or form, and your email address, when we use them for it, and handle it under their own terms.
Google LLC, Cloudflare, Inc. and GoDaddy Operating Company, LLC process this data on our behalf, under their data processing terms.
We do not sell your personal data.
6. Where data is processed
IOCODO LLC is registered in the United States. Our service providers may process your personal data in the United States and other countries where Google, Cloudflare, GoDaddy or their subcontractors have facilities.
Where European, UK or Swiss data protection law requires a safeguard for this, we rely on:
- the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework, for providers certified under them (you can check a provider on dataprivacyframework.gov)
- the Standard Contractual Clauses approved by the European Commission, with the UK Addendum and the Swiss adjustments, which are part of our providers' data processing terms
The IT service providers listed in Who receives data are in the United States and are not covered by these safeguards, by an adequacy decision or by UK adequacy regulations.
You can ask us for a copy of these safeguards at support@iocodo.com.
7. How long we keep data
- IP addresses logged by Firebase Hosting
- A few months, deleted automatically.
- Visit data in Cloudflare Web Analytics
- The full data for 7 days, then a sample of about 10 percent, which we can view for 6 months. Deleted automatically.
- Project requests, reports and emails, with our replies
- Until you ask us to delete them. We set no fixed end date: we keep them as the record of our conversations and of how we handled each report, to answer you if you write again and to show what we did. If a law or a legal claim requires us to keep one, we keep it until that ends.
- The code computed from your IP address
- With the form you sent, and in the record that limits how often one sender can send, until you ask us to delete it.
- Your language choice
- In your browser, until you clear this site's data.
When you ask us to delete your data, we delete it as described here, unless the law requires us to keep part of it.
8. How we protect data
Data travels between your browser and our service providers over encrypted connections (HTTPS).
If a security incident puts your personal data at risk, we tell you and the competent authorities when the law requires it.
9. Your rights
Wherever you live, you can ask us to:
- tell you what personal data we have about you, and give you a copy
- send that copy to you, or to another company, in a machine-readable format
- correct data that is wrong or incomplete
- delete your data
- stop or limit a use of your data, including any use based on our legitimate interests
To ask, write to support@iocodo.com. To delete your data, use the subject "Delete my data". It is free. We reply within one month, and we may ask you to confirm that the data is yours before we act.
Complaints
You also have the right to complain to an authority:
- in the European Union and the European Economic Area, the data protection authority of the country where you live or work (list of authorities)
- in the United Kingdom, the Information Commissioner's Office
- in Switzerland, the Federal Data Protection and Information Commissioner
- in Brazil, the Agência Nacional de Proteção de Dados
- in the United States, the attorney general of your state
If you are in Brazil, you have the rights listed in article 18 of the LGPD (Lei 13.709/2018), and you can use them as described above. If you ask us for your data, we send a complete answer within 15 days, not one month.
10. Privacy rights in US states
Several US states, including California, Colorado, Connecticut, Oregon, Texas and Virginia, give their residents privacy rights. We give the same rights to everyone in the United States:
- to know what personal information we collect, use and disclose, and to get a copy of it
- to correct it
- to delete it
- to opt out of the sale of your personal information, of its use for targeted advertising and of profiling that has legal or similarly significant effects
- to appeal if we turn down your request
- not to be treated differently for using any of these rights
The personal information we collect comes from you and from your browser. Why we use it and who receives it are described in What we use data for and Who receives data. We do not sell your personal information, and on these pages we do not use or share it for targeted advertising.
To use these rights, write to support@iocodo.com, or have someone you authorise write for you. We reply within one month (these state laws allow up to 45 days). If we turn your request down, you can appeal by replying with the word "Appeal" in the subject. We answer an appeal within 45 days, and if you still disagree you can contact the attorney general of your state.
11. Canada
The service providers listed in Who receives data collect and keep data for us. They may process it outside Canada, in the United States and other countries where Google, Cloudflare, GoDaddy or their subcontractors have facilities. The courts and authorities of those countries can have access to it under their laws.
12. Children
iocodo.com is not meant for children under 13, and we do not knowingly collect personal data from them. If you think a child has given us personal data, write to support@iocodo.com and we will delete it.
13. "Do Not Track" and other companies
Some browsers can send a "Do Not Track" signal. There is no common standard for responding to it, so these pages do not change what they do when they receive one. The choices described in this policy are how you control your data.
Only the service providers listed in Who receives data receive data from these pages, for the purposes listed there. We do not let other companies use these pages to collect personal data about your activity over time and across other websites.
14. Changes to this policy
We update this policy when the site or the law changes, and the date at the top shows when the current version took effect. If a change affects how we use data we already have about you, we tell you before it applies, by email if you gave us your address.
This is the first version, published on October 31, 2026.
15. Contact
- Company
- IOCODO LLC
- Postal address
- 30 N Gould St Ste N, Sheridan, WY 82801-6317, United States
- support@iocodo.com
- Data protection
- The Managing Member of IOCODO LLC, at the same email
- Report illegal content
- iocodo.com/report/
- Impressum
- Legal notice for Germany: iocodo.com/impressum/