Privacy Policy
Last updated: September 11, 2026
DecodeMind (decodemind.dev) is a tool by Archipel AI, a business located in Lévis, Quebec, Canada. It scans source code and explains what it finds, in plain language.
Your code never leaves your browser. That is not a marketing promise, it is how the tool is built: the analysis runs on your machine, inside the tab, and there is no server to send anything to.
Quebec's Law 25 governs this tool. Where the French version of this policy and this translation differ, the French version prevails.
Who is responsible for your information
What we do not collect
No account. No email. No password. No payment. No forms. No visit statistics, no tracker, no advertising cookie. We hold no database about you.
Your code is not uploaded, not copied, and not read by us. When you open a folder, the browser grants the page access to the files you chose, and you alone decide which. Scanning, rules, vulnerability detection and message translation all happen inside the tab.
What stays on your device
- Your preferences (interface language, strictness level, model size) in the browser's local storage.
- The folder you scanned last, so it can be offered again next time. That is a permission the browser remembers, not a copy of your files.
- Explanations already translated, kept so they need not be recomputed. They are filed under a fingerprint of the code, never under the code itself.
- Backup copies made before applying a fix: they are written into your own
folder, under
.decodemind-backup. - The application's files, so it works offline.
All of that lives on your device. You erase it by clearing the site's data in your browser and deleting the backup folder.
The only things your browser fetches elsewhere
The ad banner at the top of the page is loaded from GitHub Pages (GitHub, United States) on every visit. GitHub therefore sees your IP address, as it would for any image hosted elsewhere.
The AI model, if you ask the tool to translate results into plain language. The model is then downloaded from Hugging Face (United States) — several hundred megabytes — and cached by your browser. That download happens only if you click. Hugging Face sees your IP address at download time. After that, the model runs on your machine: your questions and your code do not leave it.
Our host, Cloudflare (United States), serves the pages and sees your IP address, as any host does.
The vulnerability database used to check your dependencies is bundled into the application: consulting it contacts no one.
Your rights
You may write to archipel.clients@outlook.com with any question, to request access to, correction of, or deletion of information about you, and to complain to Quebec's Commission d'accès à l'information.
Since we hold no user database, the answer to an access request will be: we hold nothing about you. What the tool keeps is on your device, and you can dispose of it without going through us.
Changes
If we change this policy, the date at the top of the page changes.