Bolt.new

StackBlitz · Coding agent · US · bolt.new

Last verified 2026-09-16
Entry services/bolt-new.yaml
Training on your data (default tier)
Prompts and outputs used for model development and licensed datasets unless the user opts out; EEA, UK, and Swiss accounts excluded
Retention
Retained while the account is active; model providers keep inputs only for limited periods
Data residency
Not stated in the privacy policy

Vendor data-handling terms

Training on your data (default tier)
Prompts and outputs used for model development and licensed datasets unless the user opts out; EEA, UK, and Swiss accounts excluded

StackBlitz defines Bolt Model Development Content and may use it to train and improve models and to prepare datasets licensed to third parties for compensation, subject to opt-out. Accounts located in the EEA, UK, or Switzerland are excluded without needing to opt out.

Unless you opt out and subject to the regional and consent rules below, we may use Bolt Model Development Content that is eligible under “Prospective Application” below to train, fine-tune, evaluate, benchmark, and improve artificial-intelligence models developed by or for StackBlitz. / We do not use Bolt Model Development Content associated with accounts located in the European Economic Area, the United Kingdom, or Switzerland for AI model development or dataset licensing; see “Accounts in the EEA, United Kingdom, and Switzerland” in Section 5.C.
checked 2026-09-16
StackBlitz Privacy Policy (covers Bolt.new)
Retention
Retained while the account is active; model providers keep inputs only for limited periods
We retain personal information and user content for as long as necessary to provide the Services, support active accounts, comply with legal obligations, resolve disputes, and enforce our agreements. / These providers do not receive ongoing or independent access to your files and retain such inputs only for limited periods.
checked 2026-09-16
StackBlitz Privacy Policy, Data retention
Data residency
Not stated in the privacy policy

The policy describes file storage in connection with the account and third-party model providers, but does not name a storage region.

not stated by vendor

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
bolt.newappobserved

Assessment

Accounts outside the EEA, UK, and Switzerland: highAccounts in the EEA, UK, and Switzerland: medium

Reasoning: Outside Europe the default is unusual: prompts and generated code may be used to train models and packaged into datasets licensed to third parties for payment, unless the account opts out. European accounts are carved out entirely, which is why the two ratings differ. In both cases the content is whatever a developer builds in the tool, with no stated storage region.

Flags: Dataset licensing to third parties (non-EEA accounts) · GDPR Chapter V (storage region not stated) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Model development, dataset licensing, EEA carve-out, and retention terms verified against the StackBlitz privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub