Privacy Policy for Code Auditor

Last updated: October 11, 2026

Code Auditor is an open-source developer tool (MIT licensed) that runs locally on your machine. It does not collect, store, or transmit personal data by default.

What stays local

All code analysis runs on your device. Source code, file paths, identifiers, and project structure never leave your machine during normal operation.

Optional, opt-in feedback

If you opt in by running code-audit telemetry enable, each finding you dismiss is sent to a feedback service. This is off by default. Each submission contains: the tool version, the rule ID, the urgency level, the dismissal reason exactly as you typed it, a structural AST signature (grammar node types only, never their contents), a coarse language hint, a timestamp, and an anonymous install ID generated on your machine. Source code, identifiers, literals, file paths, and environment details are never sent, unless you type them into the reason.

Rule requests

If you submit a rule request, the title, description, and code examples you provide are stored so the rule can be designed. No account is required.

No third-party tracking

The documentation site at codeauditormcp.com does not use cookies, analytics, or third-party tracking scripts. IP addresses are used only to rate-limit submissions and are not saved with them.

Contact

Questions or concerns: hello@codeauditormcp.com