Privacy Policy

1. Who we are

CodeFont (“we”, “us”, “our”) operates codefont.dev and publishes the CodeFont extension for Visual Studio Code.

For personal data processed through this website, we act as the data controller under the EU General Data Protection Regulation (GDPR).

Contact: [email protected]

We update the date at the top of this page when the policy changes; material changes are announced at least 14 days before taking effect.

2. The short version

The extension has no telemetry, analytics, or network calls. The website uses analytics and, when advertising is enabled, Google AdSense. We do not sell personal information; section 4.2 explains how to opt out of personalized advertising.

3. The extension

It reads installed font metadata and your own codefont.* settings, writes editor.* and terminal.integrated.* settings plus a local 24-hour cache, and stops there.

• no account or sign-in, telemetry, crash reporting, or usage statistics;
• no font files uploaded or downloaded;
• no access to your source code, file contents, or project data.

The source is MIT-licensed and public at github.com/maxlee/code-font-vscode. If you find any network request, report it as a security issue via Contact.

4. The website

4.1 Analytics

We use Google Analytics 4 (Google LLC, USA) and Umami (Umami Software) to understand aggregate traffic. Google Analytics records pages viewed, approximate region derived from IP, device and browser, referrer, and outbound clicks; we rely on legitimate interests, with IP anonymisation and advertising features disabled. Umami records page views, referrer, country, and device type without cookies. See the Google privacy policy, the Umami privacy policy, and the Google Analytics opt-out.

4.2 Advertising (Google AdSense)

When advertising is enabled, we use Google AdSense (Google LLC, USA) to display advertisements on the Site.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads based on those visits, limit how often you see the same ad, measure impressions and clicks, and detect invalid activity.

Data involved: IP address and approximate location, device and browser information, pages visited, ads shown, and cookie or advertising identifiers. Purpose: displaying and measuring advertising and preventing fraud.

Legal basis: where consent is required (EEA, UK, Switzerland), your consent (GDPR Art. 6(1)(a)); elsewhere, our legitimate interest in funding the Site. Where required, we ask before setting advertising cookies. If you do not consent, you may still see ads, but they may be less relevant.

We do not control Google’s cookies or receive the personal data they contain. Google’s privacy policy governs its handling of data; see section 7 for California residents.

Provider privacy policy: policies.google.com/privacy
How Google uses partner data: policies.google.com/technologies/partner-sites

4.3 Cookies

Advertising cookies are set by Google only when ads are served and, where required, after consent. We do not set advertising cookies ourselves; Google may set additional cookies such as _gcl_au depending on the features in use (see Google’s cookie types). You can block or delete cookies in your browser at any time.

4.4 Other data

We load the Jost typeface from Google Fonts, so Google receives your IP address and user agent; we are moving to self-hosting, and the site remains readable if you block it. Our host keeps standard request logs for security and diagnostics for 30 days. Email sent to privacy@, security@, or hello@ is used only to respond and kept only as long as needed. The website uses HTTPS and restricts access to analytics and advertising accounts.

5. What we do not do

• We do not sell, rent, or trade personal data.
• We do not train machine-learning models on your data.
• We do not build advertising profiles ourselves; ads are served by Google as described in section 4.2.
• We do not use social pixels or marketing email, or operate our own cross-site tracking.

The site and extension are not directed at children under 13, or the minimum age in your jurisdiction.

6. Retention and international transfers

Our analytics, advertising, and web-font providers — Google LLC and Umami Software — are based in the United States. Transfers out of the EEA or UK rely on the Standard Contractual Clauses or an equivalent lawful mechanism.

7. Your rights

If you are in the EEA, the UK, or Switzerland, you have the right to access, rectify, erase, restrict, or object to processing, to data portability, to withdraw consent where processing is based on it, and to complain to your supervisory authority.

If you are a California resident, you have the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information for monetary consideration. When personalized advertising is enabled, Google’s cookies may be considered “sharing” for cross-context behavioral advertising under the CCPA/CPRA. Opt out through Google Ads Settings or aboutads.info, or email [email protected] with the subject “Do not sell or share”. We do not discriminate against you for exercising these rights.

To exercise any right, email [email protected] with the subject “Data request”. We respond within 30 days. You may also complain to your local data protection authority; a list is available at edpb.europa.eu.

8. Contact

Email: [email protected]
GitHub: github.com/maxlee/code-font-vscode/issues