Privacy Policy

Effective date: October 26, 2026 ยท Last updated: October 26, 2026

This Privacy Policy explains how personal data is handled when you use the Breeze Code desktop application (the "App") and the website at breezecode.itsphatto.site (the "Website"), together the "Services". It is written to meet the Personal Data Protection Act B.E. 2562 (2019) of Thailand (the "PDPA") and, where they apply to you, other privacy laws such as the EU and UK General Data Protection Regulation (the "GDPR").

The short version: the App runs on your computer, and your code, settings, keys and sign-in details stay there. We do not run a Breeze Code account server or cloud, we do not receive your projects, and we do not collect telemetry or crash reports from the App.

1. Who we are

The Services are provided by the Founder of Breeze Code, known as @itsphatto ("we", "us" or "our"), based in Thailand. Where we decide why and how personal data is processed through the Website or in messages you send us, we act as the data controller under the PDPA. You can reach us at itsphatto@icloud.com.

2. Scope

This policy covers the App and the Website. It does not cover services run by other companies that you choose to use with the App, such as AI agents, model providers, GitHub, Google, Discord or Meta. Those companies handle your data under their own privacy policies, and we encourage you to read them. See section 6.

3. Data we do not collect

We do not receive, store or have access to:

We do not sell personal data, share it for cross-context behavioural advertising, or show ads.

4. Data the App handles on your device

The App processes the data below locally on your computer to provide its features. Unless this section says otherwise, this data is not sent to us. Because it never reaches us, we cannot access, correct or delete it for you; you control it on your own device.

4.1 Files and projects

The App opens, edits and runs files in folders you choose. Checkpoints are saved with Git inside your own project folder. Running code uses compilers and runtimes already installed on your computer.

4.2 Settings

Preferences such as your chosen agent, model server address and feature toggles are stored in the App's settings folder on your computer.

4.3 Optional sign-in with GitHub or Google

Signing in is optional. If you choose Continue with GitHub or Continue with Google, the App connects directly to that provider, which asks for your permission. The App then receives your name, username or email address and profile picture, and shows them in the App. The resulting sign-in token is encrypted with Windows' built-in data protection and stored on your computer. Signing out deletes it. The provider processes your sign-in under its own privacy policy; we do not receive the token or your profile data.

4.4 API keys

API keys and access tokens you add are encrypted with Windows' built-in data protection and stored only on your computer. They are sent only to the provider they belong to, when the App calls that provider on your behalf.

4.5 AI agents and models

Agents run only when you ask them to.

4.6 Discord presence (optional)

Discord presence is off by default. When you turn it on, the App tells the Discord app running on your computer that you are coding in Breeze Code. With extra detail turned on, it can also share the name of the open file and project. Discord may show this to other users and processes it under its own privacy policy.

4.7 Vibe Code Mode (optional)

Vibe Code Mode shows Instagram or Facebook Reels in a separate browser session inside the App. If you sign in to those sites, their cookies and session data are stored on your computer in that session. Meta processes your use of its services under its own policies.

4.8 Update checks

The App checks the official GitHub releases page for new versions and downloads an update only after you agree. Like any download, this sends a standard request to GitHub, which includes your IP address and basic technical information about your device.

5. Data processed through the Website

5.1 Hosting

The Website is hosted by Vercel Inc. When you visit, Vercel processes technical request data, such as your IP address, browser type, the page requested and the time of the request, to deliver the page and keep the service secure.

5.2 Analytics

We use Vercel Web Analytics and Vercel Speed Insights to count page visits and measure loading speed. Vercel states that these tools do not use cookies and do not track you across websites. We only see aggregated statistics, such as page views, referring sites, country and device type, and cannot identify individual visitors from them.

5.3 Latest release lookup

The download section asks GitHub's public API for the latest version number and installer size. Your browser makes this request directly, so GitHub receives your IP address and browser information.

5.4 Emails you send us

If you email us, we receive your email address, your name if you include it, and the content of your message. We use them only to reply and to keep a record of the request.

6. Third-party services

Depending on the features you use, the following companies may receive data directly from your device. Each acts under its own terms and privacy policy, and we are not responsible for their practices.

7. Purposes and legal bases

Where we process personal data ourselves, we rely on the following legal bases under the PDPA and, where it applies, the GDPR:

8. Retention

9. Security

The App encrypts sign-in tokens and API keys with Windows' built-in data protection, and the Website is served only over HTTPS. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Protect your Windows account with a password, and download the App only from the official GitHub releases page.

10. International transfers

Our service providers, including Vercel and GitHub, may process data in countries outside Thailand, such as the United States, whose data protection laws may differ from Thailand's. Where the PDPA or the GDPR requires it, these transfers rely on safeguards recognised by law, such as the provider's standard contractual clauses, or on another lawful basis.

11. Your rights

Under the PDPA, and subject to its conditions and exceptions, you have the right to:

If the GDPR or another privacy law applies to you, you may have similar rights under that law, including the right to complain to your local data protection authority.

To exercise a right, email itsphatto@icloud.com. We may need to verify your identity, and we will respond within 30 days. Because most App data never reaches us, many requests are best handled directly on your device or with the third-party provider involved.

12. Cookies and tracking

The Website does not set cookies and does not use advertising or cross-site tracking technologies. Because we do not track you across sites, we do not change our practices in response to Do Not Track signals.

13. Children

The Services are not directed at children under 13, and we do not knowingly collect personal data from them. If you are under the age of majority where you live (20 in Thailand), please use the Services with the permission of a parent or guardian. If you believe a child has sent us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the Services or the law change. We will post the new version on this page and update the date at the top. If a change materially affects how we handle your personal data, we will give notice on the Website or in the App's release notes before the change takes effect.

15. Contact

For questions about this policy or your personal data, contact @itsphatto at itsphatto@icloud.com.