Terms of Service — Codeti.dev

§1

General Provisions

1. These Terms of Service govern the rules of using the Codeti.dev web service, available at https://codeti.wheln.dev and its subpages and API interface.

2. The owner and administrator of the service is Codeti.dev (hereinafter "the Provider"), an independent project. Contact: [email protected].

3. The service provides electronic services under the terms set out in these Terms of Service.

4. Use of the service is voluntary and free of charge. The Provider reserves the right to introduce paid plans in the future, of which users will be notified with adequate advance notice.

5. Matters not regulated by these Terms of Service are governed by Polish law, in particular the Electronic Services Act, the Copyright and Related Rights Act, and the GDPR.

§2

Definitions

Service

The Codeti.dev platform that enables coding time tracking by collecting heartbeats from code editors.

User

A natural person with an account on the Service.

Account

An individual User profile created upon registration.

Heartbeat

A single data unit sent from a code editor (or other tool) containing information about programming activity, such as: editor, programming language, project, operating system, and timestamp.

API Key

An authorization key used to send heartbeats (begins with cdt_live_).

Secret Key

A key with full account access (begins with cdt_secret_).

Plugin

An official code editor extension (VS Code, Neovim, etc.) that enables sending heartbeats.

Personal Data

Any information enabling identification of the User (e-mail address, IP address, username).

§3

Registration & Account

1. Registration in the Service is voluntary and requires providing an e-mail address and username.

2. The User is required to provide true, current, and complete information.

3. Registration is available from the age of 13 years. Persons under the age of 13 may use the Service only with the consent of their parents or legal guardians.

4. The User is responsible for the security of their password and API/Secret Keys. In the event of a suspected leak, the password must be changed immediately and keys regenerated in the user panel.

5. Sharing an account with third parties and registering multiple accounts by one person without a justified reason is prohibited.

§4

Acceptable Use

1. Users may use the Service in accordance with its purpose — tracking their own programming activity.

2. The following are strictly prohibited:

Sending false or manipulated heartbeats (including altering timestamps, manually setting durations, or repeatedly sending the same data to inflate statistics)
Attempting to bypass rate limiting (e.g. by changing IP addresses, using botnets)
Using the Service for unlawful purposes, including DDoS attacks, scanning, or scraping other users' data
Attempting to hack, decompile, or reverse-engineer the API, frontend, or backend of the Service
Sending heartbeats containing source code or any sensitive data
Copying, distributing, or reselling statistical data without the Provider's consent

3. Only official plugins provided by the Provider may be used. Using unofficial or modified clients is done at the User's own risk.

Account suspensionThe Provider may suspend or delete a User's account in the event of a violation of these Terms — without prior notice — particularly in cases of manipulated heartbeats, attempted hacking, harassment, or repeated violations.

§5

Data & Telemetry (Heartbeats)

1. The Service collects the following data from heartbeats:

Programming language
Code editor
Project name (if provided)
Operating system
Timestamp (time of heartbeat — enforced by the server, cannot be manipulated)
Activity type (e.g. file editing, debugging)
IP address (security logs and rate limiting only — not publicly visible)
User-Agent (editor/plugin identification)

Your code is never collected.The Service NEVER collects, stores, or processes User source code. Heartbeats contain only metadata about activity.

2. Heartbeat data is aggregated and displayed as statistics (coding hours, projects, languages).

3. The raw heartbeat retention period is 24 months. After this time, data is aggregated — aggregated statistics are retained, but raw heartbeats are not.

4. The User may delete their account at any time, which results in the deletion of all heartbeats after 30 days (recovery period).

5. Users may export their data in JSON format using the button in the user panel.

§6

Intellectual Property

1. The User's source code remains their exclusive property. Codeti.dev makes no claim to the User's code.

2. Statistics generated from heartbeats belong to the User, but Codeti.dev has the right to display them on the public profile (according to the User's privacy settings).

3. The graphical interface, logo, the name "Codeti.dev", and the source code of the frontend and backend (excluding open-source plugins) are the property of the Provider and are protected by copyright.

4. Copying, modifying, distributing, or reselling any elements of the Service without the Provider's written consent is prohibited.

§7

Liability

1. The Service is provided "as is". The Provider does not guarantee uninterrupted, error-free, or vulnerability-free operation of the Service.

2. The Provider has made efforts to ensure the Service works correctly, but is not liable for:

Service interruptions caused by infrastructure failures (server, internet, hosting provider)
Data loss (despite regular backups)
Damages resulting from Service malfunction (e.g. incorrect statistics)
Hacker activity or unauthorized account access resulting from User negligence (weak password, API key leaks)

The Provider's total liability to the User is limited to 100 PLN (or equivalent in another currency), regardless of the basis for liability.

3. The User bears full responsibility for content sent through the Service (including heartbeats).

§8

Complaints & Cancellation

1. Complaints regarding the operation of the Service should be submitted to: [email protected] within 14 days of the event.

2. A complaint should include: username, description of the problem, date and time of occurrence, and any evidence (screenshots, logs).

3. The Provider will process the complaint within 14 days of receipt and notify the User of the outcome at the provided e-mail address.

4. Cancellation of the Service is effected by deleting the account in the user panel. Account deletion is irreversible after 30 days (recovery period).

§9

GDPR & Personal Data Protection

1. The personal data controller is Codeti.dev, contact: [email protected].

2. Personal data is processed for the following purposes:

Provision of electronic services (legal basis: Art. 6(1)(b) GDPR — contract)
Security assurance (login logs, rate limiting, IP blocking) — legal basis: Art. 6(1)(f) GDPR — legitimate interest
Optional statistical purposes and service quality improvement (with User consent)

3. Data recipients may include:

Hosting provider (Oracle Cloud)
Email service provider (Brevo)
Analytics service providers (with User consent only)

4. Data retention periods:

Account data: until account deletion (+30 days recovery period)
Heartbeats: 24 months
Login logs: 12 months

5. Users have the following rights regarding their personal data:

Right of access

Right to rectification

Right to erasure ("right to be forgotten")

Right to restriction of processing

Right to data portability

Right to object

Right to lodge a complaint with UODO

6. Providing personal data is voluntary but necessary to use the Service (without registration, the Service cannot be used).

7. Data is not transferred to third countries outside the European Economic Area (EEA), except where a service provider (e.g. Brevo) ensures appropriate safeguards.

§10

Cookie Policy

1. The Service uses cookies for the following purposes:

Maintaining user session (auth_token cookie — essential for operation)
Remembering user settings (e.g. theme, language)
Optional analytical purposes (Google Analytics) — with User consent

2. Detailed information about cookies can be found in the Cookie Policy.

3. Users can change cookie settings in their browser or via the cookie banner on the main page.

§11

Amendments

1. The Provider reserves the right to amend these Terms of Service at any time, in particular to adapt them to legal or technical changes.

2. Users will be informed of changes to the Terms via:

A notice displayed on the main page
An e-mail sent to the address associated with the account (for significant changes)

3. Changes take effect after 14 days from their announcement. A User who does not accept the changes has the right to delete their account before the changes take effect.

4. Continuing to use the Service after changes take effect constitutes acceptance of the new Terms.

§12

Final Provisions

1. Matters not regulated by these Terms of Service are governed by Polish law.

2. Any disputes arising from use of the Service shall be resolved by the court competent for the place of residence of the User acting as a Consumer.

3. Users are obliged to comply with the Terms of Service and applicable law.

4. These Terms of Service enter into force on April 6, 2026.

5. Contact for legal and regulatory matters: [email protected].