Codex Labs · Legal

Data & permissions

Effective: June 3, 2026 · Last updated: June 3, 2026

This page is a plain-language companion to our Privacy Policy and Cookie Policy. It tells you exactly what data this website collects and what device or browser permissions it requests, all in one place, without legalese.

1. At-a-glance permissions

Here is every permission or data access a browser might ask about, and our status for each.

The four permissions marked "not requested" are also enforced at the network level via a Permissions-Policy HTTP response header, so the site cannot activate them even by accident.

2. Data we collect on this website

Google Analytics

We use Google Analytics (provided by Google LLC) to understand how people use the site. Analytics data is aggregated and covers pages visited, approximate region derived from IP address, device and browser type, referring URL, and on-site interactions like scroll depth and link clicks. Individual visitors are not identified. See the Cookie Policy for details on the specific cookies set.

Functional local storage

A single key (codex-theme) is saved in your browser's local storage to remember your chosen display theme. This value lives on your device only; it is never transmitted to our servers or to any third party.

Cloudflare server and security logs

The site is hosted on Cloudflare Pages. Cloudflare automatically processes incoming requests to protect and deliver the site. This covers your IP address, HTTP request metadata (path, method, headers, timestamp), and any security-relevant signals. These logs are controlled by Cloudflare and are not in Codex Labs' direct custody. See Cloudflare's Privacy Policy for details.

Information you send us directly

If you email us at privacy@codexcorp.ca or any other Codex Labs address, we receive whatever you include in your message (your name, email address, and the contents of your inquiry). We use this only to respond to you and to keep records where appropriate.

3. Device and browser permissions

This website requests no device or browser permissions. There are no prompts for camera, microphone, location, or notifications. The only client-side storage this site touches is the analytics cookies set by Google Analytics and the single local-storage key for your theme preference. Neither requires a browser permission prompt.

4. Our apps

Each Codex Labs mobile app has its own Data & Permissions page covering the data and device permissions specific to that app (camera, microphone, health data, storage, notifications, and so on). Find the page for the app you use below:

These pages describe each app's data collection practices and the device permissions it requests. They are separate from this website page.

5. Cookies and local storage

This website uses:

• Analytics cookies set by Google Analytics to measure aggregate site usage. These are performance/analytics cookies, not advertising or tracking cookies.
• Theme local storage: a single key (codex-theme) stored on your device to remember your display preference. Not a cookie; not transmitted to us.

There are no advertising cookies, no social media tracking pixels, and no third-party retargeting scripts. For full details including cookie names, durations, and how to refuse or clear them, see our Cookie Policy.

6. Third parties

The only third-party services active on this website are:

• Google Analytics (Google LLC): aggregate site-usage measurement. Google may process analytics data on servers outside Canada. See Google's Privacy Policy.
• Cloudflare (Cloudflare, Inc.): hosting, content delivery, and DDoS protection. See Cloudflare's Privacy Policy.
• Google Fonts (Google LLC): typefaces loaded from Google's CDN. Your browser makes a request to Google's servers when the page loads. See Google's Privacy Policy.

We do not sell, rent, or trade your personal information to third parties for their own purposes.

7. Your choices and controls

• Clear cookies and local storage: use your browser's privacy or settings menu to delete cookies and clear site data for labs.codexcorp.ca at any time.
• Do Not Track / Global Privacy Control: if your browser sends a DNT or GPC signal, we note it. Our analytics provider (Google) has its own signal-handling behaviour; see Google's documentation for details.
• Google Analytics opt-out: install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting data about your visits across any site that uses it.
• Contact us: to ask questions, exercise rights under PIPEDA or BC PIPA, or request that we delete any personal information we hold about you, email privacy@codexcorp.ca.

8. Data location, retention, and your rights

We are based in Vancouver, British Columbia, Canada and operate under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (BC PIPA). Some of our service providers (Google, Cloudflare) may store or process data on servers outside Canada, including in the United States, where local laws may apply.

We keep server logs and analytics data only as long as reasonably needed for security and analytics purposes. For full details on retention periods, cross-border transfers, and how to exercise your privacy rights (access, correction, withdrawal of consent), see our Privacy Policy.

9. Contact

Questions about this page or about data and permissions for the Codex Labs website? Get in touch:

Codex Labs, an operating company of Codex Corp
Vancouver, British Columbia, Canada
Privacy: privacy@codexcorp.ca
Legal: legal@codexcorp.ca