Privacy Policy
Effective 13 September 2026
Our approach
Cosojo collects only the information reasonably necessary to preserve appreciation, operate My Gratitude and protect the service from misuse. We do not sell personal information or use it for advertising.
Information you provide
Public appreciation notes may include the recipient's name, workplace, department and the message you submit. A Private Thank You is kept out of the public Museum and may be viewed only in the sender's history or through a sender-created link that expires after 7 days. If you post while signed in, we also receive your sign-in provider’s account identifier, name (when provided) and email address. Your email address and account identifier are not displayed in the public Museum.
Anonymous posting and safety
For anonymous submissions, Cosojo uses a one-way identifier derived from network information to apply temporary spam limits. Raw IP addresses are not intentionally stored in appreciation records. Cloudflare Turnstile helps distinguish people from automated abuse.
Service providers and AI safety screening
Cosojo uses Supabase for authentication and data storage, Vercel for hosting, Apple for native sign-in, Google services for sign-in, places and automated message-safety screening, and Cloudflare Turnstile for bot protection. Before a note is submitted, we ask for your agreement to send its text to Google’s third-party AI safety service to screen for harmful content. Do not include private, sensitive or confidential information in a note. Information necessary for these functions may be processed by these providers under their own privacy terms.
Public and permanent content
Appreciation submitted to the public Museum is intended to be public and preserved. Private Thank You notes remain preserved in the sender's history but are excluded from public discovery. Please do not include private, sensitive or confidential information in a note. We may remove content when requested by its author, when privacy or safety requires it, or when it violates Cosojo's principles.
Your choices
You may post anonymously where that option is available. Signed-in users may view their submitted notes in My Gratitude and may keep a note private. A sender can create a new 7-day viewing link for a private note when they choose to share it. Every permanent note includes a private correction, removal or content-report form. You may decline AI safety screening by not submitting the note.
Account deletion and retention
You can delete your account from My Gratitude. This permanently deletes all your public and private notes, private links and account record. If you linked Apple, we revoke its authorization during deletion. Other information is retained only while reasonably necessary for service operation, safety and legal obligations.
Children
Cosojo is not directed to children under 13. Do not submit personal information about a child without appropriate authority and consent.
Contact
Questions or requests may be sent to theillogicaltrader@gmail.com.