Privacy

Privacy Policy

Version: 2026-10-18 · Effective: October 18, 2026

Who is responsible

CockpitSquare is operated by Roy Kronenfeld, trading as rkApps, based in Hadera, Israel. We determine how personal information is used for the platform. Contact [email protected] or use Contact for privacy enquiries and requests. Our mailing address appears in the Legal Notice.

This policy covers CockpitSquare. Merchants, giveaway organizers, Google sign-in and external media services have their own privacy notices.

Information we use and why

Account and security: your email, username, display name, password hash and authentication or recovery information help us create and protect your account and restore access. Optional Google sign-in provides your Google account identifier, email and verification information; it does not give us access to your Gmail messages, contacts or Drive files.

Community: profile details, avatars, setups, tagged hardware, posts, comments, media and resource submissions let us display your contributions and provide community features. Saved items, follows, club memberships and notification preferences let us deliver the features and updates you request. We do not learn interests from your browsing or build behavioural interest profiles. Discovery uses your explicit selections and general community information.

Marketplace: listings, wanted requests, images, approximate location, contact messages and transaction, rating or report records help participants connect and address safety concerns. We record your adult self-declaration and when you made it to enforce the 18+ participation rule, without collecting a date of birth through that confirmation.

Other requested features: access requests and invitations use the contact information you provide, including a Discord username where requested. Giveaway progress records your self-reported completion of entry steps. Company applications and catalogue administration use business contact details, authority information and relevant public product/company sources.

Communications and compliance: we use correspondence, supporting material, report and appeal outcomes, and records of your terms acceptance and consent choices to answer requests, respect preferences and meet our responsibilities.

Technical information: IP addresses, browser/device information, security logs and diagnostic records help operate and protect the service. We estimate your shopping country from your IP address and use United States if detection is unavailable. Marketplace distance features request browser permission before using your location and store an approximate location. Our own optional product-view, comparison and merchant-link analytics omit account and persistent browser identifiers. Separately, if you explicitly allow the updated Analytics choice, Microsoft Clarity provides heatmaps and session recordings of public pages to help us improve usability. It receives interaction and device/browser information and can use browser/session identifiers. We do not enable it on account, administration or private-message pages, or pass account IDs, names or emails as Clarity identifiers.

Most information comes from you or your use of a feature. We also receive relevant information from people contacting you or reporting content, approved representatives, sign-in providers and public business sources. Required fields are needed to provide the requested service or handle a request; optional profile details may be omitted.

Legal grounds and choices

Where applicable data-protection law requires a legal basis, we rely on contractual necessity to provide requested account and community services; legitimate interests in operating and securing the platform, moderating content and handling claims, balanced against your rights; consent for optional analytics, external media and marketing; and legal obligations where processing is required by law. Acknowledging this policy is not blanket consent.

Security and essential service messages are separate from optional activity updates and News & offers. Marketing is opt-in and can be withdrawn in account settings or through an available unsubscribe link. Joining the site or using Google sign-in does not subscribe you to marketing. Push notifications require browser permission; you can manage them in account and device settings. Notification previews may be visible on your lock screen. We do not enable email-open or email-link tracking in our email delivery service.

Public information and sharing

Published profiles, posts, discussions, setups and listings are public and may be indexed or copied by others. Do not publish sensitive information you do not intend to share. Invitation-only registration does not make public content private.

When you contact a marketplace seller, we share your message and email address so the seller can reply. Subsequent correspondence takes place through the participants' email services. Giveaway organizers determine eligibility and handle information you submit to them. Company representatives receive aggregate company analytics and can see the same public contributions as other visitors.

We share information with service providers as needed for hosting, storage, email, authentication, abuse prevention, AI-assisted features and monitoring. Current providers include DigitalOcean, Cloudflare, Backblaze, UniOne, GoDaddy/Microsoft, Google, OpenAI and Grafana Cloud. Microsoft also processes optional Clarity analytics when you allow it; see https://privacy.microsoft.com/privacystatement and https://learn.microsoft.com/clarity/setup-and-installation/clarity-cookies for its processing and storage information. Your chosen browser push service delivers enabled notifications, and YouTube receives technical request information when you allow its embedded media to load.

OpenAI processes relevant submitted content for automated moderation and product information for summaries and comparisons. These service functions are separate from optional analytics. We have not enabled provider data sharing for model improvement for these submissions.

We may share relevant information to handle reports, protect rights or safety, or comply with lawful requests. A compliant copyright counter-notice, including its required contact details, is forwarded to the original notifier. We seek to limit disclosures to what the purpose requires.

International processing

CockpitSquare is operated from Israel. Our application is hosted in Germany, and recovery storage and other providers may process information in the United States and other countries. Where required, transfers are covered by an applicable adequacy decision or contractual safeguards, including standard contractual clauses and relevant UK provisions. Contact [email protected] for information about safeguards applicable to your data.

Automated moderation

Automated tools and human review help identify policy violations. Results may lead to review, a request for changes, restricted visibility, removal or account restrictions. These tools can make mistakes and do not guarantee that all harmful content is detected. You can request human review through the available appeal process or Contact. The Terms and Community Guidelines explain our moderation rules.

Private messages and product feedback

We process message introductions, text, participants, timestamps and your own unread position to provide requested conversations, prevent abuse and deliver enabled web push notifications. Messages have their own header indicator and do not generate notification emails or appear in the general notification bell. Message text is not included in push payloads or notification delivery logs. Conversations are not end-to-end encrypted. Staff do not have a general inbox browser: authorized staff can access selected messages submitted in a report, with at most one preceding and one following message per selection. Report access and actions are audited. Private message content is not sent to automated content moderation services.

Each message and pending introduction expires two calendar years from its own sending date. Expired content is hidden even if physical cleanup is delayed. Removing a conversation from your inbox hides it from your list; it does not delete the other participant's copy or erase service records. Block and rejected-request records contain the minimum identifiers needed to enforce contact restrictions and remain while needed for that purpose. Report evidence is reviewed within thirty days and deleted within one year by default; resolving a report shortens retention to at most ninety further days. A justified restricted hold needs a recorded reason, review date within ninety days and bounded deletion date. Moderation audit records expire after one year. Backups are restricted recovery copies; restoration must reapply expiry and deletion before serving message data.

Owner Feedback contains your five answers and the product you tagged. Public product pages show aggregated scores, not individual owner answers. Product feedback invitations start enabled for new and existing accounts. Turn them off in Notifications or use the invitation's unsubscribe link to stop them; you may still answer on the website. Eligible invitations are sent once per owner/product after fourteen calendar days and grouped in one email when multiple products become due. Secure personal survey links expire after thirty days and never submit an answer merely by opening them.

How long we keep information

Account information and contributions are generally kept while needed to provide your account and requested features, until you remove them or request account deletion. The adult declaration remains for the account lifetime. Limited records may be kept longer where necessary for a legal obligation, an unresolved dispute, fraud prevention or a safety investigation, based on the purpose and applicable time limits.

Raw product engagement records expire after 90 days. We remove obsolete records from retired features rather than using them to infer interests. Access requests are removed after 30 days; unused invitation contact details expire 30 days after expiry or revocation. Redeemed invitation records remain while needed to administer access.

Notification delivery records normally expire after 90 days and provider feedback after 30 days. Managed account-export files expire 14 days after delivery or 30 days after creation, whichever comes first. Routine support correspondence is reviewed for deletion 12 months after closure unless an unresolved matter justifies longer retention.

Deletion and expiry may take time to complete, including after service interruptions. Restricted backups expire under their recovery schedules; relevant deletion requests must be reapplied if a backup is restored. Providers may retain their own records under their agreements or legal duties. Copies already received by other people or held in external caches are outside our direct control.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection or a portable copy of your information, withdraw consent and complain to the relevant data-protection authority. These rights are subject to applicable conditions and exceptions. Withdrawing consent does not affect earlier lawful processing or records we must retain on another lawful basis.

Use account and cookie settings where available, or contact [email protected], including if you cannot sign in. We may verify your identity proportionately before disclosing information or taking sensitive action. We respond within applicable deadlines and explain any lawful refusal or extension. Access copies are provided securely with appropriate protection for other people's information.

Security, age limits and changes

We use technical and organizational safeguards appropriate to the service, but no system guarantees perfect security. Report suspected incidents to [email protected].

Accounts are for people aged 16 or older; marketplace participation is 18+. Age declarations are not identity verification. If you believe someone is using the service below the applicable age, contact [email protected] so we can investigate and take appropriate action.

We identify the current version of this policy and give appropriate notice of material changes. An update does not automatically opt you into marketing or other optional processing.