Privacy

Privacy Policy

Effective August 23, 2026 · Pointed Designs LLC · support@cosplayedapp.com

Cosplayed is operated by Pointed Designs LLC ("we", "us"). This policy describes what we collect when you use the Cosplayed iOS app and why. Questions: support@cosplayedapp.com.

What we collect

  • Account email — used to sign you in (email/password, Sign in with Apple, or Google). Apple's private relay addresses are supported. Your email is held by our authentication provider (Firebase Authentication) and is not published anywhere in the app.
  • Profile content you write — display name, handle, bio, region, interests, social handles, and photos you upload (avatar, listing photos, portfolio photos). Your public profile and listings are visible to anyone using the app.
  • Marketplace activity — listings, offers, orders, messages, commission requests and quotes, reviews, and reports you file. Messages are visible to the other participant and, when reported, to our moderators.
  • Shipping addresses — a buyer's ship-to address is collected at checkout to price shipping and tax and create the label; a seller's ship-from address is stored to generate labels. Addresses are shared with our shipping partner (Shippo) to buy postage.
  • Payment information — handled by Stripe. We never see or store card numbers. Sellers who onboard for payouts provide identity information directly to Stripe (Stripe Connect). We store only non-sensitive references (customer and account identifiers) and order amounts.
  • Precise location (optional) — used on-device to center the convention map and power the "distance from me" filter. It is never stored on our servers and never shared. You can decline and the app works fully.
  • Usage and device data — via Firebase Analytics and Crashlytics: device identifiers, event counts (e.g., "listing published"), and crash reports. Our analytics events carry no personal content and we do not set analytics user IDs. We do not use this data for advertising and we do not track you across other companies' apps or websites.
  • Push tokens — if you enable notifications, a device token is stored to deliver them. You can turn categories off in Settings → Notifications.

How we use it

To run the marketplace: process orders, hold payment until delivery is confirmed, resolve problem reports and disputes, deliver messages and notifications, show conventions near you, prevent fraud and abuse, and comply with law.

Who we share it with

Service providers only, each doing a job for us: Stripe (payments and seller payouts), Shippo (shipping labels — receives names and addresses), Google Firebase (authentication, database, storage, analytics, crash reporting, push), and Google Maps geocoding (convention addresses only — no user data). We do not sell personal data, and we do not share it for cross-context behavioral advertising.

Moderation

Reported content (listings, messages, profiles, reviews) is reviewed by our moderators, who can remove content and disable accounts. Order-problem evidence (photos, notes) is visible to the other party and to the moderator deciding the case.

Retention and deletion

You can delete your account in the app (Profile → Delete account). Deletion removes your profile, handle, attendance marks, saved addresses, Stripe customer record, commissioner application, and photos, and takes your listings off the market. Records of completed orders, and reviews you left for others, are retained — they are part of the other party's transaction history. Deletion is refused while an order is still in progress; complete or resolve it first. Some records may be retained where required for financial or legal compliance.

Your choices and rights

  • Notifications, and location access, are controlled in the app's Settings and iOS Settings.
  • You can edit your profile at any time, and block or report other users.
  • Depending on where you live (e.g., California, EU/EEA, UK), you may have rights to access, correct, delete, or port your personal data, and to not be discriminated against for exercising them. Contact support@cosplayedapp.com and we'll respond within the time your law requires.

Children

Cosplayed is not directed to children under 13, and you must be old enough to form a binding contract (or have a parent's permission) to buy or sell. If we learn we have collected personal data from a child under 13, we will delete it.

Changes

We'll post changes here and update the effective date. Material changes will be announced in the app.