Last updated 19 August 2026
Code Brown has no accounts, no ads, no analytics and no tracking. It
stores the phrases people submit, the votes they cast, and a random number that keeps
one person from voting twice.
What is collected
- A random device identifier. The first time you open the app it generates a
random UUID and keeps it on your device. It is not your Apple ID, not the device's
advertising identifier, and is not derived from anything about you or your phone. It
is sent with submissions, votes and reports so that each device gets one vote per
phrase, one report per phrase, and a daily submission limit.
- Phrases you submit. The text you type and the category you pick, stored with
the identifier above so a submission can be traced back to a repeat abuser and
removed.
- Votes and reports. Which phrase was voted on or reported, by which
identifier, and — for a report — the reason you chose.
That is the complete list. If you never submit, vote or report, the app never sends
anything.
What is not collected
No name, no email address, no password, no account. No location, contacts, photos,
calendar or health data. No advertising identifier and no ad network. No analytics or
crash-reporting service. No third-party SDKs of any kind — the app ships with zero
package dependencies. Nothing you do in the app is used to build a profile of you or
tracked across other apps or websites.
Where it is stored
Submissions, votes and reports are stored in a Postgres database hosted by
Supabase in the United States. As with any
internet service, Supabase's servers record standard request logs, which include the IP
address a request came from; those logs are used to run and secure the service and are
not joined to submissions or shown to anyone else.
This website is served by Cloudflare Pages. It sets no cookies and runs no analytics;
Cloudflare records the same kind of standard request logs described above.
Who it is shared with
Nobody. Nothing is sold, rented, or handed to advertisers or data brokers. The only
third party involved is the hosting provider above, which processes the data on our
behalf so the app can run. Approved phrases are public — they appear on the leaderboard
to everyone — but they are never shown with the identifier that submitted them.
Reporting, blocking and moderation
Everything submitted is reviewed by a human before it appears anywhere; submissions
containing slurs are rejected automatically on arrival. On the leaderboard, every row
has a control to report the phrase or block its submitter. Reported
phrases are reviewed within 24 hours and removed if they breach the rules. A phrase
reported by several different people is pulled off the board immediately, before review.
Blocking is instant and permanent for you: nothing from that submitter appears on your
board again, and you can clear the list from the bottom of the leaderboard at any
time.
There is no tolerance for objectionable content or abusive users.
Keeping and deleting
Approved phrases stay on the leaderboard until they are removed. Votes and reports are
kept for as long as the phrase they refer to exists. Because there are no accounts, we
cannot look you up — but you can delete anything of yours two ways: delete the app, which
destroys the random identifier on your device and severs the only link between you and
what you submitted, or email us quoting the phrase and we will delete it. Reinstalling
generates a brand-new identifier that cannot be connected to the old one.
Children
Code Brown is not directed at children under 13 and does not knowingly collect
anything from them.
Changes
If this policy changes, the date at the top changes with it and the new version is
posted on this page.
Contact
Questions, deletion requests, and reports of objectionable content:
[email protected]. Reports are answered
within 24 hours.