Code Maps

Privacy

The short version: Code Maps runs on your machine, and this website barely knows you were here.

This is a draft. It is written in plain language to describe what the software actually does, and it is pending legal review. It is not legal advice, and it may change without notice.

Last updated: 2026

Your code

Code Maps analyses repositories as local processes on the computer running it. Cloning, parsing, git history, Trivy and gitleaks all execute there. Your source code is not uploaded to us, and there is no Code Maps server that receives it.

Clones and their cached analyses live in a .repos/ folder next to the software. Deleting that folder deletes them.

The chat with the AI

The chat is the only feature that sends anything off your machine. When you ask a question, it calls the Anthropic API with:

  • the list of modules with their metrics (paths, lines, complexity, commits);
  • the findings, without the value of any secret — only the rule that matched and the file and line;
  • the contents of any file the model chooses to read in order to answer.

That request uses your own API key and is governed by Anthropic's terms and privacy policy. If you never open the chat, nothing is ever sent.

Secrets

When gitleaks matches a possible secret, Code Maps stores the rule name and the file and line only. The matched string is not written to the cache, not rendered in the interface, and not included in anything sent to the chat.

This website

The marketing pages you are reading now store two things in your browser:

  • a lang cookie, set when you visit a page in a given language, so the site opens in that language next time. It holds one of en, es or zh and nothing else;
  • a codemap-theme entry in localStorage, if you use the light/dark toggle. It holds dia or noche.

There is no analytics script, no advertising pixel, no third-party tracker and no consent banner, because there is nothing to consent to. Fonts are loaded from Google Fonts and the 3D libraries from jsDelivr, which means those providers see your IP address as they would for any web page that uses them.

Server logs

If you use a hosted instance of this site, its web server keeps ordinary request logs (IP address, URL, user agent, timestamp) for operation and abuse prevention. They are not linked to any profile and are not sold or shared.

Email

If you write to us, your message and address sit in an ordinary mailbox and are used only to answer you and to keep track of the conversation. Ask and they are deleted.

Children

Code Maps is a developer tool and is not directed at children.

Questions

Ask anything about this page, or ask for your data to be deleted, at hello@codemaps.co