Your code stays private

"Private" on a US-hosted platform means something different than you might expect. GitHub, Inc. is a US corporation. GitLab, Inc. is incorporated in Delaware. Both are subject to the CLOUD Act, which allows US law enforcement to compel a US company to hand over data regardless of where it is stored. The governing law in your contract does not override this.

GitHub may use your code, prompts, and suggestions to train AI models on individual plans (Free, Pro, Pro+, Max) unless you opt out in settings. Business and Enterprise plans are excluded (GitHub's published terms, checked 17 September 2026). On Codebahn, there is no training infrastructure at all. There is nothing to opt out of.

Private by architecture

Every repository on Codebahn is private. Not a default you can flip. A product decision enforced in the code with FORCE_PRIVATE, which the application config cannot override. There are no public repos, no explore page, no activity feed, no user search. One tenant cannot discover that another tenant exists. Cross-tenant API requests return 404, not 403.

The same holds for builds. CI jobs run on ephemeral VMs provisioned per organization and destroyed when idle; jobs from different organizations never share a VM.

No training, no telemetry, no tracking

• Your code is stored and served. It is not scanned or fed to a model. There is no training pipeline. We access repository content only when required for a support request, security incident, or abuse investigation.
• No third-party analytics on authenticated pages. No usage analytics scripts, no tracking cookies. Gravatar, stars, activity feeds, and federation are all disabled. We record a short list of first-party onboarding milestones (described in privacy 2.4) in our own database to fix setup friction; they carry no repository or code activity data.
• No third-party tracking. No Google Analytics, no Facebook Pixel, no tracking scripts. Fonts are self-hosted.
• Marketing site analytics. Plausible runs on public pages (marketing site, docs, login) and the read-only demo. Processed in the EU on Hetzner Germany. No cookies, no personal data. We count signups, started checkouts, and clicks on the get-started and demo buttons in Plausible so we can see how many people the site converts; those counts carry no account identifier.
• Support. Reach us at hello@codebahn.net.

EU-only data path

• Company: Hackerman AB, a Swedish limited company.
• Compute and storage: Scaleway, Paris, France.
• Backups: Hetzner, Falkenstein, Germany. Separate provider, separate region from production.
• Payments: Mollie, Amsterdam, Netherlands.
• Every sub-processor is EU-incorporated. See the full sub-processor list.

No US-incorporated entity sits anywhere in the data path. For the full jurisdiction argument, see EU-hosted.

All of this is auditable. Codebahn is built on Forgejo, which is GPL-3.0: the Git hosting, authentication, and access control code is public. We add tenant isolation and billing on top.

Encryption

• In transit: TLS 1.2+, TLS 1.3 where supported. HSTS enabled.
• At rest: AES-256 for repositories, the database, object storage and backups. Repository and backup keys are held by us; the managed database and object storage use the infrastructure provider's keys.
• Backups: Client-side encrypted with Restic before leaving Scaleway. Hetzner stores ciphertext only.

What we collect

Your email address (authentication and notifications) and server access logs (debugging and abuse prevention, rotated after 30 days). Plausible collects anonymous page views on public pages only. Full details in the privacy policy.

Data portability

One-click export of your repositories, issues, and history in standard format. Git LFS objects are not in the archive; fetch them with git lfs fetch --all before you switch. No ticket, no exit fee. After cancellation you get a 30-day read-only window. Built on Forgejo, so your data works on any Forgejo instance or self-hosted setup. See leaving Codebahn, and continuity for what is in place if Codebahn itself is the thing that fails.