List Coder is an open-source Integrated Development Environment (IDE) built to deliver a native, high-performance AI coding experience. This document outlines our licensing model, our sustainable approach to keeping the IDE free, and how we protect and process developer data.
Sustainable Business Model
List Coder operates under a unique "Ethical Data-based Freemium" model. We believe that high-quality development tools should be accessible to every developer globally, regardless of their financial or geographical situation.
To maintain the IDE and fund the substantial API, compute, and development costs without charging our users, we license anonymized, non-sensitive coding telemetry to AI training organizations.
Our Training Partners
We partner with leading AI research institutions and technology companies, including:
- NVIDIA
- Figma
- Moonshot AI
- Qwen
- Kwaipilot
- Alibaba Group
These partners use the sanitized datasets to train next-generation large language models (LLMs) and code intelligence systems. In return, the funding we receive keeps all of List Coder's cloud AI features, agents, and IDE services 100% free of charge.
Data Policy and Classifications
We adhere to the principles of Privacy by Design and Data Minimization. Every piece of data collected undergoes a strict multi-layer sanitization pipeline directly on your local device before transmission.
📊 Data Classification Matrix
| Category | Type | Description | Sanitization Action |
|---|---|---|---|
| Category A | Technical Development | AST structures, design patterns, quality metrics, and package imports. | Obfuscates variables; replaces literal strings with generic types. |
| Category B | Interaction / UX | UI interactions, command history, auto-completion acceptance rates. | Anonymized and aggregated; no screen or keystroke logs. |
| Category C | Error Context | Compiler/runtime errors, stack traces, and IDE exception logs. | Sanitizes stack paths; strips user directories and local identifiers. |
| Category D | Performance / Telemetry | OS details, hardware specs, startup speed, and crash dumps. | Strips persistent MAC addresses and network details. |
| Category E | Security / Fingerprint | CPU ID, BIOS serial, Motherboard/Disk serials, Windows username. | Stored hashed; strictly for anti-abuse and ban enforcement. |
🚫 Hard Blocked Data (Strict Exclusions)
Under no circumstances does List Coder collect:
- Plaintext passwords or secrets.
- Asymmetric cryptography private keys (SSH, PEM, etc.).
- GitHub, Google, or cloud service authentication tokens.
- Credit card details or financial information.
- Personally Identifiable Information (PII) like emails or phone numbers.
- Source code comments or variable names containing business-sensitive logic.
Real-Time Obfuscation:
Our local sanitization agent scans all outgoing telemetry against hundreds of regular expressions for keys, credentials, and PII. Any block containing a suspected secret is immediately discarded.
User Control & Autonomy
We respect developer sovereignty and offer options to fit your privacy preferences:
1. Offline Mode & Local Models
If you work on sensitive commercial codebases and cannot transmit telemetry, you can configure List Coder to run 100% locally. By integrating with Ollama, you can host models like Qwen2.5-Coder and Llama 3 on your own hardware. In this configuration, no data leaves your machine.
2. List Coder Enterprise License
For organizations that require cloud AI services but need absolute data privacy, we offer a paid Enterprise License. This tier disables all telemetry and data sharing, backed by corporate SLA and compliance agreements.
3. Anti-Abuse and Security Measures (Category E)
To prevent malicious usage, spamming, and Sybil attacks on our free AI servers, List Coder gathers hardware fingerprints (Category E). When a user violates our Terms of Service and is suspended, their hardware signature is logged to prevent ban evasion.
- Hashed hardware ban signatures are retained for 5 years under LGPD Art. 7, IX and GDPR Art. 6(1)(f) (Legitimate Interest).
- Deleting your account does not remove active ban signatures, securing our community from repeated abuse.
Regulatory Compliance
- LGPD (Brazil): Processed under Consent (Art. 7, V) and Legitimate Interest (Art. 7, IX) for security features.
- GDPR (EU): All data transfers outside the EU use standard contractual clauses (SCCs). Our Data Protection Officer can be reached at
List-Enterprise@outlook.com. - CCPA (California): Users can manage data sharing controls directly in their Privacy Settings page.