Privacy Policy

Last updated: April 4, 2026

CodeMySpec (“we”, “us”, “our”) operates the codemyspec.com website. This policy describes how we collect, use, and protect your information.

What We Collect

Account Information

When you register, we collect your email address and create an authentication credential. We do not collect your name, address, or payment information unless you provide it voluntarily.

Usage Analytics

We use Google Analytics (GA4, measurement ID: G-EHBYEW52MM) to understand how visitors use our site. Google Analytics collects:

  • Pages visited and time spent
  • Browser type and device information
  • Approximate geographic location (country/region level)
  • Referral source

Google Analytics uses cookies to distinguish unique visitors. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

Cookies

We use the following cookies:

  • _code_my_spec_key: Session cookie for authentication. HttpOnly, Secure, SameSite=Lax. Essential for the application to function.
  • Google Analytics cookies (ga, _ga*): Used for analytics as described above. Not essential.

Server Logs

Our hosting provider (Fly.io) may collect standard server logs including IP addresses, request timestamps, and HTTP headers. These are retained for operational purposes and are not used for tracking.

How We Use Your Information

  • Authentication: Your email is used to identify your account and send authentication emails.
  • Analytics: Aggregated usage data helps us understand which features and content are most useful.
  • Communication: We may send you transactional emails related to your account. We do not send marketing emails.

What We Don’t Do

  • We do not sell your data to third parties.
  • We do not use your data for advertising.
  • We do not share individual-level data with anyone.
  • We do not use tracking pixels or fingerprinting beyond Google Analytics.

Data Storage and Security

  • Account data is stored in a PostgreSQL database hosted on Fly.io in the Toronto (YYZ) region.
  • All connections use HTTPS with HSTS preloading.
  • Session cookies are signed and use the Secure flag.
  • Passwords are hashed using bcrypt.

Your Rights

You can:

  • Access your data: Contact us to request a copy of the data we hold about you.
  • Delete your account: Contact us to request deletion of your account and associated data.
  • Opt out of analytics: Use the Google Analytics opt-out add-on or disable cookies in your browser.

AI Crawler Policy

Our robots.txt allows AI search crawlers (GPTBot, ClaudeBot, Google-Extended, PerplexityBot) to index our public content for search and citation purposes. We block AI training crawlers (CCBot, Bytespider) from using our content as training data.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date.

Contact

For privacy-related questions, contact us through the website at codemyspec.com.