Is Bolt.new safe with your data?
Bolt.new
StackBlitz
Good disclosure · high confidence
Bolt.new earns a B (61/100) because it discloses most of its data practices.
Dealbreaker flag
- D1.4: you grant Stackblitz a worldwide, non-exclusive, royalty-free, sublicensable, and transferable license to use, reproduce, process, adapt, modify, and create derivative works of your Bolt Model Development Content
#29
of 216 apps ranked
61
score · Coding avg 51
+10
vs category average
Bolt.new trains models on Bolt prompts and code by default with a free account-level opt-out, but the Terms take a sublicensable and transferable licence over that content, the retention section names no period, and nothing is said about security controls or breach notification.
What Bolt.new's privacy policy and terms of service say about your data
Training with an opt-out
Prompts, code, interaction data and project files submitted to Bolt AI Features may be used to train StackBlitz models and to build de-identified datasets licensed to third parties for money, unless the user opts out through account settings or by emailing privacy@stackblitz.com; opt-outs are implemented within fifteen days and EEA, UK and Swiss accounts are excluded entirely.
Content licence goes beyond the service
The Terms require a worldwide, sublicensable and transferable licence to use, reproduce, adapt and create derivative works of Bolt Model Development Content for model training and dataset licensing, a grant far wider than operating the product.
Forge trades data for a discount
Bolt Forge is offered on eligible plans on the condition that prompts, output and project files are used for training and licensed datasets, the ordinary opt-out does not apply while Forge is on, and the policy values a participating user's data at about $6.50 per month.
Retention and security left open
Data is kept for as long as necessary with no stated period, account closure data is deleted within a reasonable period rather than a set number of days, and the policy names no encryption, access control or breach notification commitment.
What the policy is silent or vague on
- Not stated: your ownership of generated outputs
- Not stated: shorter retention for AI conversation logs
- Not stated: a data-minimisation commitment
- Not stated: a standard for government and law-enforcement access
Bolt.new privacy rating
Details
- Category
- Coding
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-09-22
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other coding apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.