Privacy Policy

Account data: your login, email (optional), and a salted password hash — we never store your password itself. Optional profile fields you fill in yourself: avatar, banner, bio, and social links.

Content you create: comments and forum posts, direct messages, collection article proposals, appraisal requests, and token valuation submissions.

Technical data: your IP address is processed briefly (kept 24 hours) to rate-limit registration, login, and comment attempts and prevent abuse. We also log unhandled errors and privileged/moderation actions for debugging and security.

To run the account and features you use — messaging, comments, ratings, appraisals, valuations — and to keep the Service secure against spam and abuse. We don't run ads and don't collect analytics or tracking cookies.

Your public profile, comments, and forum posts are visible to anyone. Direct messages are visible only to you and the person you're messaging. Appraisal requests and token valuations are visible to our small admin/editor team as needed to act on them.

We use a small set of processors to run the Service: Resend (sends verification and password-reset emails), Pinata (hosts images you upload, on IPFS), OpenAI (drafts collection articles from admin-submitted source material), and Vercel/Supabase (hosting and database). We don't sell your data or share it for advertising.

Account and content data is kept while your account exists. Deleting your account (Settings → Danger zone) permanently removes your account, comments, messages, proposals, and valuations — see our Terms for the small set of records that stay in anonymized form (e.g. a past appraisal report itself isn't deleted, but it stops being linked to you).

Under GDPR/RODO, you can access, correct, or delete your data, object to processing, or ask for a copy of it. Account deletion is self-service in Settings; for anything else, or to file a complaint, write to contact@cosmos.zone. You can also complain to Poland's data protection authority (UODO).

We use one essential cookie to keep you signed in. No analytics or advertising cookies.

The Service isn't intended for anyone under 16.

We may update this policy as the Service evolves; the date below reflects the latest version.