Privacy Policy

Codex (the "Service") is operated by Behr Builds, located in New Jersey, United States. You can reach us any time at privacy@behrbuilds.com.

Codex is intended primarily for organizing tabletop RPG campaign notes. You must be at least 13 years old to use Codex.

Account information. When you create an account we collect your email address, an authentication credential (a password you choose, or the identifier returned by Google Sign-In), a display name, and an optional avatar image URL. We also store the date your account was created and the date of your most recent sign-in.

Google Sign-In. If you sign in with Google, Google confirms your identity to us and shares basic profile information such as your email address, name, and profile image URL. We do not receive your Google password.

Web / email authentication. If you sign up with email and password, your password is handled by our authentication provider and stored only in hashed form. We never see your plaintext password.

Content you create. Campaigns, lore entries, live session notes, tags, categories, idea-chat threads and messages, and any other text you enter. This is your creative content and it is private to your account.

Technical information. Our application and hosting infrastructure process ordinary technical data needed to serve requests and keep the Service reliable and secure, such as IP address, browser and device type, request timestamps, and error logs.

In-app analytics. Codex uses only the analytics built into the application platform we use to host it. These are aggregate usage and error signals used to keep the app working. Codex does not use third-party behavioral advertising or ad-tracking technologies.

Please do not store highly sensitive information in Codex, including passwords, authentication credentials, Social Security numbers, government IDs, financial account or payment card information, medical records, or other highly confidential personal information. Codex is a campaign-notes tool and is not designed for that data.

• To create and maintain your account and authenticate you.
• To store, display, search, and organize the notes and campaigns you create.
• To provide AI-assisted features you request, such as sorting a live note into the right entry, summarizing, formatting, categorizing, or discussing your ideas.
• To operate, secure, debug, and improve the Service.
• To respond to you when you contact us.
• To comply with law and to enforce our Terms of Service and Acceptable Use Policy.

Behr Builds does not sell users' personal information. We also do not use your notes for third-party advertising.

Codex uses AI to help you enter, organize, categorize, summarize, search, format, and otherwise manage your notes. To do that, relevant portions of your notes, prompts, and campaign context may be transmitted through Lovable's AI infrastructure and the AI model providers it routes requests to in order to produce a result and return it to you.

We only send what is relevant to the action you requested. We do not use your notes to train our own models. We cannot make guarantees on behalf of the underlying AI providers about their retention or model-training practices, so we do not claim that those providers never retain or never train on request data. For that reason, avoid entering sensitive personal or confidential information into AI-assisted features.

• Lovable / Lovable Cloud — application hosting, database, authentication, server functions, and in-app analytics.
• Lovable AI infrastructure and associated AI model providers — used only to fulfill AI-assisted requests you initiate.
• Google — only if you choose Google Sign-In, for authenticating you.

We do not use payment processors, because Codex is currently free and does not process payments. We do not use advertising networks.

Your campaigns, entries, notes, and chats are private to your account. Codex currently has no public sharing of notes or campaigns and no user-to-user collaboration. Access is restricted at the database level so that a signed-in user can read and write only the data belonging to their own account.

A small number of Behr Builds administrators can access underlying systems where necessary to operate, support, secure, or legally comply for the Service.

You retain ownership of your original notes and creative content. Behr Builds receives only the limited rights necessary to host, store, process, organize, display, secure, and provide the AI functionality you request for your content. See the Terms of Service for details.

We keep your account information and content for as long as your account exists. You can edit or delete individual notes, entries, and campaigns at any time from within Codex.

Export. From your account menu, under Privacy & Data, you can export your own Codex data as a JSON file. The export contains only data belonging to your account.

Account deletion. Also under Privacy & Data, you can permanently delete your account. This deletes your campaigns, lore entries, live notes, idea threads and messages, your profile record, your role record, and your authentication account. This cannot be undone. Ordinary operational and security logs, and any backups that exist, may persist for a limited period before expiring in the normal course. You may also email privacy@behrbuilds.com to request deletion.

Codex relies on the security features of its hosting platform, including managed authentication, HTTPS transport for traffic to the Service, and per-user database access rules that restrict each account to its own rows. We take reasonable measures appropriate for an application of this kind.

We do not claim any security certification, formal compliance program, or specific encryption standard beyond what our infrastructure provides. No online service can be guaranteed to be completely secure, which is another reason not to store highly sensitive information in Codex.

Codex is not intended for children under 13, and you must be at least 13 years old to create an account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact privacy@behrbuilds.com and we will delete it.

Codex uses cookies, local storage, and session storage for authentication, session management, security, and remembering simple app preferences such as your active campaign. Codex does not currently use third-party behavioral advertising cookies. See our Cookie Policy for the full list.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to not be discriminated against for exercising those rights. Codex is built so you can exercise the core of these rights directly in the app: view and edit your data, export it, and delete your account.

For anything else, email privacy@behrbuilds.com and we will respond within a reasonable time. We do not sell personal information, so there is no sale to opt out of.

We may update this policy as Codex evolves. If Codex later adds functionality such as sharing, collaboration, or optional paid features, we will update this policy to describe it. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app.

Codex is an independent note-taking and campaign organization application. Codex is not affiliated with, sponsored by, endorsed by, or approved by Wizards of the Coast, Hasbro, Darrington Press, Critical Role, or any other tabletop game publisher. Third-party trademarks and intellectual property remain the property of their respective owners. Codex does not provide or distribute official game rules or sourcebook content.

Any Dungeons & Dragons, Daggerheart, or other tabletop RPG information appearing in Codex is entered by users into their own private notes.

Behr Builds, New Jersey, United States — privacy@behrbuilds.com