Know what CoBlick can access.

Security controls

Production traffic is encrypted. CoBlick checks account, project, Team, and staff access on the server. Sensitive actions require a current sign-in, and error reports do not include tokens or downloaded block files.

Agent connections

CoBlick does not ask for or store your model provider key. Connected coding agents can search the catalog, read block details, and download files included in your plan. Activity shows which CoBlick action ran, when it ran, its status, and small counts. It does not include prompts, conversations, provider keys, or downloaded files.

Connection permissions

When you connect a coding agent, you choose a project and review what it can do. Current permissions cover catalog search, block details, and block downloads. Connected agents cannot change projects, billing, or account settings. You can disconnect an agent from the dashboard.

Token storage

Project tokens for shadcn and MCP access tokens are shown once. CoBlick stores only enough information to recognize each token and show its name, prefix, project, dates, permissions, and status. Browser connection tokens stay on the server, expire automatically, and are removed when you disconnect. Complete tokens are never emailed.

Incident handling

CoBlick checks the website, block downloads, agent connections, previews, sign-in emails, and billing. Confirmed customer incidents appear on the public status page. InstaBlick LLC reviews security reports and notifies affected customers when required by law or material risk.

Export and deletion

Signed-in users can export their account and project data. Account deletion blocks new access, closes eligible subscriptions, and then removes or anonymizes app data, except for records that must remain for legal, billing, security, or backup purposes.

Export or delete a signed-in account

Subprocessors

These providers process only the data required for their role. Contractual and transfer safeguards apply where required.