codefmt privacy & data

requests to the api and agent endpoints (format, mcp, a2a, ask, llms.txt) are counted in aggregate through umami: endpoint, platform, and outcome only

the /api/format endpoint reads the ip address that vercel attaches to each request ( x-real-ip ) and holds it in a short-lived in-memory counter for up to 60 seconds

submitted code and queries are processed in memory and never stored or sent to analytics

when you format code using the browser extension, your code is sent over https to codefmt.dev/api/format for processing

to enforce per-ip rate limits

sentry only gets error reports, including uncaught errors and unhandled promise rejections

umami records anonymous, aggregated page views and events with no cookies, no cross-site tracking, and no personal data

the code is never persisted to any database, never written to long-term storage, never logged, and never shared with third parties

is deleted before the api response returns, regardless of whether formatting succeeded or failed

holds it in a short-lived in-memory counter for up to 60 seconds

these log lines roll off with vercel's default log retention

codefmt does not sell or share anyone's personal data, for any visitor