Política de privacidade
Por enquanto, nossa política de privacidade está disponível apenas em inglês.
The short version
Codetto is built so that your work stays on your device. We don’t ask for your name, email or any account to start coding.
- No accounts. You can use Codetto without signing up or telling us who you are.
- Your notebooks stay with you. Code, notebooks and edits are saved in your browser on your device, not on our servers.
- Code runs on your device. Python runs inside your browser, so your code is not sent to us to run.
- Light, anonymous telemetry you can turn off. We count things like notebooks created and opened, and collect error reports, to keep Codetto working. You can switch this off in Settings.
- No ads, no selling data. We don’t show advertising, build profiles of students, or sell or rent any information.
- AI lessons use your teacher’s AI provider. Lessons that explore AI language models send prompts directly to the AI provider your teacher sets up, not to us.
- The AI coding assistant is off by default. If it is turned on, your request and the related notebook code go directly to the AI provider set up in Settings, not to us.
Last updated: Oct 27, 2026. Effective: Oct 27, 2026.
Who we are
Codetto is a free, browser-based coding notebook for students and teachers, available at codetto.org and codetto.app. It is operated by Codetto, LLC (“Codetto,” “we,” “us”). You can reach us at privacy@codetto.org or by mail at Codetto, LLC, 9407 NE Vancouver Mall Dr, Ste 104, Vancouver, WA 98662.
This policy covers the Codetto web app (including when installed as an app on your device), the Codetto curriculum, and our websites. It does not cover other websites you visit from links inside lessons.
What we collect, and what we don’t
We do not knowingly collect personal information from anyone using Codetto.
| Information | Do we collect it? | Details |
|---|---|---|
| Name, email, phone, address | No | There are no accounts or sign-up forms. |
| Notebooks, code and edits | No, unless you share | Stored only in your browser on your device. |
| Shared notebooks | Yes, for 90 days | When you share a notebook, a copy is uploaded to our AWS storage so others can open it from the link. It is deleted automatically after 90 days. |
| Code output and files you create | No | Created and kept in your browser. |
| Location, contacts, camera, microphone | No | Codetto does not request these permissions unless they are used explicitly in a notebook. |
| Advertising IDs or tracking cookies | No | We don’t use advertising or cross-site tracking. |
| Usage telemetry | Yes, unless you turn it off | Aggregate counts of notebooks created, opened and shared, on the app and codetto.org. No device or user identifiers. Off switch in Settings. |
| Error reports | Yes, unless you turn it off | Details of app errors in your browser (error message, browser, app version). No identifiers and no notebook code or content. |
| Technical request data (IP address, browser type, time, page requested) | Briefly, by AWS | Standard server logs used to deliver the app, prevent abuse and fix problems. Deleted after 90 days. |
| Prompts typed in AI lessons | No | Sent directly from your browser to the AI provider your teacher set up. See “Third-party services.” |
| AI coding assistant requests and code | No | Sent directly from your browser to the AI provider set up in Settings, only when you use the assistant. See “Third-party services.” |
If you contact us by email, we receive your email address and message and use them only to reply.
How Codetto works on your device
Codetto runs Python directly in your web browser using Pyodide, an open-source version of Python built for the web. When you run a cell, your code runs on your own computer, not on our servers.
- Local storage. Notebooks in “My Notebooks” are saved in your browser’s storage on that device. We cannot see, read or recover them.
- Offline use. If you install Codetto as an app, it can work without an internet connection. Lessons that explore AI language models still need to be online.
- Curriculum downloads. When you open the Explore tab or download a lesson, your browser requests those files from our servers. We don’t link downloads to any individual.
- Shared devices. On a shared or school computer, anyone using the same browser profile may see your notebooks. Clearing the browser’s site data deletes them.
Sharing. If you choose to share a notebook, a copy is uploaded to our storage on AWS so others can open it from the link. Anyone with the link can view it, and the copy is deleted automatically after 90 days. Please don’t share notebooks that contain personal information.
Third-party services
We use a small number of outside services to deliver Codetto. We don’t share personal information with anyone for their own marketing.
| Service | Why we use it | What it receives |
|---|---|---|
| Amazon Web Services (AWS) | Hosts the app, curriculum, Python packages, shared notebooks and telemetry | Standard request data (IP address, browser, time), aggregate telemetry, error reports and shared notebooks |
| The AI provider the teacher sets up (see below) | Powers lessons that explore AI language models, and the AI coding assistant | The prompts typed into those lessons, AI coding assistant requests and the related notebook code, plus standard request data |
Python (Pyodide) and all Python packages are hosted by us on AWS, so loading them does not involve any other company.
AI lessons. Some lessons let students send prompts to an AI language model. The teacher creates an account and API key with an AI provider and shares it with their class. Prompts go directly from the student’s browser to that provider; Codetto does not see, store or log them. The provider handles them under its own terms and privacy policy, and the teacher’s account and key are between the teacher and that provider.
AI providers set their own age rules, so the provider a class can use depends on the students’ ages:
| Provider | Allowed for students under 18? | Notes |
|---|---|---|
| OpenAI API (default) | Yes, with safeguards | The account holder must meet OpenAI’s under-18 requirements, including zero data retention for any data from children under 13. |
| Anthropic (Claude API) | Yes, with safeguards | The account holder must meet Anthropic’s requirements for organizations serving minors. |
| OpenRouter | No, 18+ only | For university and adult classes. OpenRouter privacy policy |
AI coding assistant. Codetto includes an optional assistant that can suggest changes to the code in a notebook cell. It is off by default and only works once an AI provider and API key are set up in Settings, usually by a teacher, for example by scanning a setup QR code. When a student asks the assistant for help, the request and the notebook code it relates to are sent directly from the browser to that provider; Codetto does not see, store or log them. Suggested changes are shown for review and are only applied if the student accepts them. Teachers can turn the assistant off for a whole notebook or for individual cells. The same provider rules below apply.
For students under 18, we recommend a key owned by the school or district rather than a personal teacher account. AI lessons are not intended for students under 13.
Teachers who set up a key are responsible for making sure their class’s use meets the provider’s terms and their school’s policies. Students should not type personal information, such as their name, school or address, into AI prompts or assistant requests. Teachers can skip these lessons entirely, and can leave the assistant switched off.
Links inside lessons may lead to other websites, which have their own privacy policies.
Children’s privacy
Codetto is designed for high school and university students, and may be used by students in middle school, including children under 13. Because Codetto does not ask for or collect personal information from users, children can use it without providing any.
- We do not require children to give personal information to use Codetto.
- We do not use children’s information for advertising, profiling or targeted ads.
- We do not knowingly collect personal information from children under 13, as defined by the U.S. Children’s Online Privacy Protection Act (COPPA).
- Our telemetry and error reports are aggregate, are not tied to an identity, and are used only to run and improve Codetto. They can be turned off in Settings.
- AI lessons and the AI coding assistant send prompts and code to the provider the teacher sets up, not to us. Students should not enter personal information into prompts or shared notebooks.
If you are a parent or guardian and believe your child has sent us personal information, for example by emailing us, contact us at privacy@codetto.org. We will delete it promptly. Codetto is designed to comply with COPPA and applicable student privacy laws.
For schools and teachers
Codetto does not receive or store student education records, so schools can use it without sharing student data with us.
- Students don’t need school email addresses, rosters or logins to use Codetto.
- Teachers can edit lesson translations; those edits are saved in the teacher’s own browser.
- Because student work stays on the student’s device, schools remain in control of it under FERPA and local student-privacy laws.
If your school or district needs a signed student data privacy agreement, contact us at privacy@codetto.org.
Security, retention and your choices
The safest data is data we never hold, so Codetto keeps your work on your device by design.
- Security. Codetto is served only over HTTPS from AWS. Code runs in your browser’s sandbox. Access to our logs and telemetry is limited to the people who operate Codetto.
- Retention. Server request logs and error reports are deleted after 90 days. Shared notebooks are deleted 90 days after they are shared. Aggregate telemetry counts, which identify no one, may be kept longer. Emails you send us are kept only as long as needed to respond.
- Turning off telemetry. Go to Settings in the app and switch telemetry off. This also stops error reports.
- Your notebooks. You control them. Delete a notebook in the app, or clear Codetto’s site data in your browser settings to remove everything. Because we don’t have a copy, we can’t restore deleted notebooks, so export anything you want to keep.
- Your rights. Depending on where you live, you may have rights to access, correct or delete information about you. Since we generally hold none that identifies you, most requests can be met by clearing your browser data; for anything else, email privacy@codetto.org.
- We never sell personal information or share it for cross-context advertising.
International users
Codetto is used by students around the world and is available in multiple languages. Codetto is delivered worldwide through Amazon CloudFront, so the app and curriculum may be served from an AWS location near you. Shared notebooks, telemetry and logs are stored by AWS in the United States (AWS us-east-1, Northern Virginia).
If you are in the UK, EU or another region with data protection laws, our legal basis for processing request logs is our legitimate interest in running and securing the service. You can contact us or your local data protection authority with any concerns.
Changes to this policy
If we change how Codetto handles information, we will update this page and the “Last updated” date. Before adding accounts or storing student data on our servers, we will publish an updated policy and, where required, ask for consent.
Contact us
Questions or requests: privacy@codetto.org
Codetto, LLC
9407 NE Vancouver Mall Dr, Ste 104, Vancouver, WA 98662