PRIVACY
POLICY.

CodeWatchdog is a code security review service operated by Noir Protocols. The service includes an AI-assisted code scanner and a human review programme for software projects. We can be contacted at the address provided on the Contact page.

We collect only what is necessary to operate the service.

• Contact form submissions: name, email address, and the message you submit. Stored in a private database, used only to respond to your enquiry.
• Engineer application submissions: name, email, and the introduction text you provide. Used only to evaluate your application.
• Enterprise meeting requests: name, email, company, preferred meeting time, and any notes you include. Used only to arrange the requested meeting.
• AI scan code input: code you paste or upload into the AI scanner is sent to Anthropic's API for analysis and is not stored by CodeWatchdog after the scan completes. See section 04.

We do not collect payment information, account credentials, or any data beyond what you explicitly submit.

• No Google Analytics or Google Tag Manager
• No Facebook Pixel, LinkedIn Insight Tag, or any ad network tracker
• No Hotjar, FullStory, Microsoft Clarity, or session recording
• No Intercom, Drift, Zendesk, or behavioural tracking chat tools
• No cookies set by CodeWatchdog
• No fingerprinting or cross-site tracking of any kind

When you use the AI Deep Scan tool, the code you submit is transmitted to Anthropic's API for processing. The following applies:

• Code is sent over an encrypted HTTPS connection to Anthropic's servers.
• Anthropic does not train its models on API inputs by default. This is governed by their Privacy Policy and API usage terms.
• CodeWatchdog does not store your code after the scan completes. The scan result is held in your browser's session storage and is deleted when you close the tab.
• Human reviewers operate under a non-disclosure agreement (NDA) as standard. Code shared for human review is handled privately and is not retained beyond the scope of the project.

This site is hosted on Cloudflare Pages. API endpoints run as Cloudflare Workers. Form data is stored in Cloudflare D1. Cloudflare processes traffic at the network layer and is subject to their own Privacy Policy.

Cloudflare automatically adds a NEL (Network Error Logging) header to all responses. This instructs browsers to report network-level errors (failed connections, TLS failures) back to Cloudflare's own infrastructure. It does not transmit page content, form data, or any information about your visit. This header cannot be removed by CodeWatchdog — it is injected at the network layer by Cloudflare itself.

Font files are loaded from fonts.gstatic.com (Google Fonts). This is the only third-party domain this site contacts. Google Fonts does not set cookies and the request does not include identifying information about your visit beyond a standard HTTP request.

Contact form, application, and meeting request data is retained only as long as necessary to fulfil the purpose for which it was submitted. If you would like your submission deleted, contact us at the address on the Contact page and we will remove it within 30 days.

AI scan data is not stored server-side. No deletion request is necessary for scan submissions.

You have the right to request access to, correction of, or deletion of any personal data you have submitted to us. You also have the right to object to its processing. To exercise any of these rights, contact us using the Contact page. We will respond within 30 days.

If this policy changes materially, the updated version will be posted on this page with a revised effective date. We do not send policy update notifications by email. The current version is always accessible at this URL.