Privacy Policy

Cobbic is an ephemeral social platform that supports anonymous and registered participation. This policy explains what we collect, why, how long we keep it, and how you can control your data — pared down to the essentials.

Quick summary

Public content (threads, messages, buzz counts) is visible by design — do not post secrets.
Anonymous participation is supported; we log metadata for safety and abuse prevention.
We keep ephemeral content short-term; certain logs and backups are retained for safety/legal reasons.
You have standard privacy rights (access, correction, deletion, portability); use the contacts below to request them.

1. Data we collect

We collect only what’s necessary to operate the service:

Public content: thread messages, images, polls, buzzes — visible to other users.
Auth data (if you create an account): email (optional), username, auth tokens.
Logs & metadata: IP, device info, timestamps — used for security and moderation.
Support & reports: messages you send to support, reports, appeals.

2. Retention

Typical retention windows (subject to legal holds):

Ephemeral public content: removed on thread expiry (default 24h + extensions).
Moderation logs & safety caches: ~30–365 days depending on purpose.
Account data: until deletion plus a short grace period (e.g., 90 days) to prevent abuse.
Payment/billing records: retained as required by law.

Exact periods depend on legal obligations and incident investigations; see contact info to request specifics.

3. Legal basis & your rights

Where required (e.g., EU), we rely on: contract performance, legitimate interests (safety, product), consent (marketing), and legal compliance.

You can request:

Access — a copy of your personal data.
Rectification — correct inaccurate data.
Deletion — erase personal data (subject to legal exceptions).
Portability — export data you provided in machine-readable form.
Restriction/Objection — limit or object to certain processing (e.g., profiling or marketing).

To request any of these, email dpo@cobbic.com or legal@cobbic.com. We may verify identity before fulfilling requests.

4. Cookies & trackers

We use essential cookies for sessions and security. Analytics trackers are used to improve the product and are enabled only with consent where required. You can control cookies via browser controls and any in-app consent settings.

5. Third parties & transfers

We use hosting, analytics, and email providers. These processors act on our instructions and are contractually required to protect data. Data may be transferred internationally; where law requires, we use safeguards (e.g., SCCs).

6. Security

We apply reasonable technical and organizational measures (TLS, access controls, encryption for sensitive data). No system is perfect — if a breach affects your data we will notify you and regulators as required by law.

7. Children

Cobbic is for users 18+. If we learn we processed a child's data in violation of law, we will delete it promptly.

8. Changes & contact

We may update this policy. For material changes we'll notify users where required. Questions or privacy requests: dpo@cobbic.com or legal@cobbic.com.