Privacy Policy
Last updated
UnityIDE is a desktop IDE for Unity developers, distributed from unityide.app. This page explains exactly what the website and the desktop application collect, why, and who else sees it.
The short version: we collect what is needed to run an account, bill a subscription, fix crashes, and answer your AI requests. We do not sell personal data.
What we collect
Account
| Data | Why |
|---|---|
| Email address | Identifies the account, sends verification and password resets. |
| Password | Stored only as a salted hash. We never store, log or transmit the password itself, and cannot recover it. |
| Plan | Determines which features and usage limits apply. |
If you sign in with Google or GitHub instead, we receive your email address and basic profile information from that provider and create the same account record. We never receive your password for those services.
Payments
Subscriptions are processed by Dodo Payments, who act as the merchant of record. Card details are entered on their systems and are never sent to, seen by, or stored by us. We store only the subscription identifier, product, plan, status and renewal date needed to know what you are entitled to.
Desktop application
| Data | Why |
|---|---|
| Install identifier | A random value generated on your machine on first run. It is not derived from your hardware, your account or any identifier assigned by your operating system, and it lets us count installs without counting the same machine twice. |
| Operating system, application version, release channel | Tells us which builds are actually in use, so a platform is not broken for a release without anyone noticing. |
| Crash and error reports | The error type and message, the stack trace, the application version, channel and operating system, a session identifier, and your user identifier when you are signed in. A stack trace can incidentally contain file paths from your project. |
AI features
This is the section worth reading closely, because it concerns your source code.
When you use chat, inline completion or any other AI feature, your prompt is sent to a model provider together with the context needed to answer it. That context can include source files, file paths, symbol names, and information read from your open Unity Editor such as scene, prefab and asset structure. Requests are routed through Cloudflare AI Gateway to the model serving your plan; one model tier is served directly by Meta.
We record the token counts and cost of each request in order to meter usage against your plan. If you do not want a project's code leaving your machine, do not use the AI features on that project.
Feedback
If you send feedback, we store your rating, message, chosen category and the email address you supply, so we can reply.
Website, advertising and security
- Google Ads and Google Tag Manager run on the public marketing and documentation pages to measure which ads lead to a download. They are never loaded on the sign-in, verification, password-reset, account or admin pages, because those URLs carry one-time tokens.
- Reddit advertising measurement works the same way. A click identifier from a Reddit ad is stored in a first-party cookie on this domain so that a later sign-up can be attributed to it.
- Cloudflare Turnstile protects the sign-in and sign-up forms from automated abuse.
- IP address and browser user agent are processed for security and abuse prevention, and are sent to Reddit in hashed or raw form as part of advertising conversion matching.
Who else receives data
| Recipient | What they receive |
|---|---|
| Cloudflare | Hosting, database, file storage, AI gateway, bot protection. All data above passes through their infrastructure. |
| Dodo Payments | Your payment details and billing identity, as merchant of record. |
| Model providers | AI prompts and the code context included with them. |
| Sign-in (if used), and advertising measurement events from the website. | |
| GitHub | Sign-in, if used. |
| Advertising conversion events, including a hashed email address where available. |
We do not sell personal data, and we do not share it for unrelated advertising.
Cookies
The website sets a session cookie so that you stay signed in, an advertising click-identifier cookie described above, and cookies set by Google's advertising tag. Blocking the advertising cookies does not affect your ability to use the site or the application.
How long we keep it
- Account and subscription records — for as long as the account exists.
- Crash reports and install records — retained while they are useful for diagnosing a release, then deleted.
- Advertising click identifiers — 30 days.
- AI prompts — not retained by us beyond what is needed to serve the request and record its token count. Model providers apply their own retention.
Your rights
You can ask us to show you the personal data we hold about you, correct it, or delete it along with your account. Write to [email protected] from the address on the account and we will action it. Deleting your account removes the account record and unlinks it from crash reports; it does not retroactively withdraw data already processed by a payment provider, who have their own legal retention obligations.
Depending on where you live you may have additional rights under local data protection law, including the right to object to processing and to complain to a supervisory authority.
Children
UnityIDE is a professional development tool and is not directed at children under 13. We do not knowingly collect their data.
Changes
If this policy changes materially we will update the date at the top of this page. Continuing to use UnityIDE after a change means you accept the updated policy.
Contact
Questions about this policy, or a request about your data: [email protected]. You can also use the feedback form.