Bolt.new
StackBlitz · Coding agent · US · bolt.new
services/bolt-new.yamlVendor data-handling terms
StackBlitz defines Bolt Model Development Content and may use it to train and improve models and to prepare datasets licensed to third parties for compensation, subject to opt-out. Accounts located in the EEA, UK, or Switzerland are excluded without needing to opt out.
“Unless you opt out and subject to the regional and consent rules below, we may use Bolt Model Development Content that is eligible under “Prospective Application” below to train, fine-tune, evaluate, benchmark, and improve artificial-intelligence models developed by or for StackBlitz. / We do not use Bolt Model Development Content associated with accounts located in the European Economic Area, the United Kingdom, or Switzerland for AI model development or dataset licensing; see “Accounts in the EEA, United Kingdom, and Switzerland” in Section 5.C.”
“We retain personal information and user content for as long as necessary to provide the Services, support active accounts, comply with legal obligations, resolve disputes, and enforce our agreements. / These providers do not receive ongoing or independent access to your files and retain such inputs only for limited periods.”
The policy describes file storage in connection with the account and third-party model providers, but does not name a storage region.
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| bolt.new | app | observed |
Assessment
Reasoning: Outside Europe the default is unusual: prompts and generated code may be used to train models and packaged into datasets licensed to third parties for payment, unless the account opts out. European accounts are carved out entirely, which is why the two ratings differ. In both cases the content is whatever a developer builds in the tool, with no stated storage region.
Flags: Dataset licensing to third parties (non-EEA accounts) · GDPR Chapter V (storage region not stated) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Model development, dataset licensing, EEA carve-out, and retention terms verified against the StackBlitz privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.