Legal, Disclaimer & Privacy Policy

1. About this document

This page sets out the disclaimer and privacy practices for Decode, a visual programming application operated by ARPM (“we”, “us”, “our”). By accessing or using the Service you acknowledge the terms described here. If you do not agree, please do not use the Service.

2. What Decode is

Decode is a browser-based visual programming environment. You build programs by placing components on a canvas and connecting them with data and event wires; the graph is evaluated to produce results. The Service may include real-time collaboration (shared canvases, presence and cursors) and optional compute back-ends that execute parts of your graph.

3. Disclaimer & “as is” notice

The Service is provided on an “as is” and “as available” basis, without warranties of any kind, whether express or implied, including but not limited to merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, secure, or that data you create will be preserved.

To the maximum extent permitted by law, ARPM and its contributors will not be liable for any indirect, incidental, special, consequential or punitive damages, or any loss of data, arising from your use of (or inability to use) the Service. You are responsible for keeping independent backups of any work you value.

4. Information we process

While you use Decode, we may process the following:

• Account & identity data — such as your user identifier, name and email, provided through our identity provider when you sign in.
• Project & graph data — the components, wires, parameters and other content you create, save or load.
• Collaboration data — presence, cursor positions and edits shared with other participants in a session you join.
• Operational & diagnostic data — technical logs, error reports, approximate timing and device/browser information used to keep the Service running and to debug issues.

5. Authentication & sign-in

Sign-in is handled by a dedicated identity provider (an OpenID Connect / OAuth 2.0 service). When you choose to log in, you are redirected to that provider to authenticate, and then returned to Decode with a short-lived authorization code that the application exchanges for an access token. We do not see or store your password. The identity provider processes your credentials under its own terms and privacy policy.

6. Browser storage & cookies

Decode stores a small amount of data in your browser’s sessionStorage — primarily your access token and sign-in session — so the editor can stay authenticated for the duration of your visit. This data is scoped to your browser tab/session and is cleared when the session ends or when you sign out. We do not use this storage for advertising or cross-site tracking.

7. How we use information

• To provide, operate and secure the Service and your sessions.
• To save and restore your projects and enable collaboration.
• To diagnose problems, prevent abuse and improve reliability.
• To communicate with you about access, changes or important notices.

We do not sell your personal information.

8. Sharing & third parties

We share information only as needed to run the Service: with our identity provider for authentication, with infrastructure and hosting providers that process data on our behalf, and with other participants you choose to collaborate with. We may also disclose information where required by law or to protect the rights, safety and integrity of the Service.

9. Retention & security

We retain information for as long as needed to provide the Service and for legitimate operational purposes, after which it may be deleted or anonymized. We apply reasonable technical and organizational measures to protect data; however, because Decode is in development, no method of transmission or storage can be guaranteed to be fully secure.

10. Your choices & rights

Depending on your location, you may have rights to access, correct, export or delete your personal data, or to object to or restrict certain processing. You can also sign out at any time to clear your local session. To make a request, contact us using the details below; we may need to verify your identity first.

11. Children

Decode is not directed to children and is not intended for use by anyone under the age required to consent to online services in their jurisdiction. We do not knowingly collect data from children.

12. Changes to this policy

As Decode evolves, we will update this document and revise the “last updated” date above. Material changes will be reflected here; your continued use of the Service after an update constitutes acceptance of the revised terms.

13. Contact

Questions about this policy or your data? Reach us via arpm.studio/contact.