Privacy Policy

Cosplayed is operated by Pointed Designs LLC ("we", "us"). This policy describes what we collect when you use the Cosplayed iOS app and why. Questions: support@cosplayedapp.com.

What we collect

• Account email — used to sign you in (email/password, Sign in with Apple, or Google). Apple's private relay addresses are supported. Your email is held by our authentication provider (Firebase Authentication) and is not published anywhere in the app.
• Profile content you write — display name, handle, bio, region, interests, social handles, and photos you upload (avatar, listing photos, and commission portfolio photos). Your public profile — including your commission portfolio and any note with it — and your listings are visible to anyone using the app. Your region stays private.
• Marketplace activity — listings (including the conventions you tag a listing with, and the state and country you choose to show as where you're selling from — both public on the listing), offers, messages and pinned notes (tracking numbers, handoff plans, payment notes you choose to pin), commission requests and quotes (including any reference or example photos, visible to both parties), the commission's agreed scope and its progress (started, completed, or cancelled), sales you mark as sold, reviews (after a sale or a completed commission), and reports you file. Messages and pins are visible to the other participant and, when reported, to our moderators. Whether you personally are attending a convention stays private to you; only what you put on a listing is public.
• Listing fee payments — the fee to publish a listing is processed by Stripe. We never see or store card numbers. We store a payment reference and the fee amount with the listing. We also keep a count of how many of your free listings you've used, so the right listings are free; it's private to your account. Payments between buyers and sellers happen outside the app and we do not collect, see, or store them. We do not collect shipping addresses.
• Precise location (optional) — used on-device to center the convention map and power the "distance from me" filter. It is never stored on our servers and never shared. You can decline and the app works fully.
• Usage and device data — via Firebase Analytics and Crashlytics: device identifiers, event counts (e.g., "listing published"), and crash reports. Our analytics events carry no personal content and we do not set analytics user IDs. We do not use this data for advertising and we do not track you across other companies' apps or websites.
• Push tokens — if you enable notifications, a device token is stored to deliver them. You can turn categories off in Settings → Notifications.

How we use it

To run the marketplace: publish listings and collect the listing fee, deliver messages, pins, and notifications, track commission requests, quotes and progress, show what is being brought to a convention, record sales and reviews, show conventions near you, prevent fraud and abuse, and comply with law.

Who we share it with

Service providers only, each doing a job for us: Stripe (listing fee payments only), Google Firebase (authentication, database, storage, analytics, crash reporting, push), and Google Maps geocoding (convention addresses only — no user data). We do not sell personal data, and we do not share it for cross-context behavioral advertising.

Convention pages show a preview of that convention's website, which your device loads directly from the convention's own servers — so that site can see your IP address and basic browser information, just as if you had visited it yourself. We don't control those sites, and nothing from the preview is stored on your device.

Moderation

Reported content (listings, commission listings and portfolios, messages, pins, profiles, reviews) is reviewed by our moderators, who can remove content and disable accounts. We do not adjudicate payments or deliveries between users.

Retention and deletion

You can delete your account in the app (Profile → Delete account). Deletion removes your profile, handle, attendance marks, commission portfolio and other photos you uploaded, and any commissioner application from before applications were retired; takes your listings off the market; and discards any unpaid draft. Reviews you left for others are retained — they are part of the other party's history — and records of listing fees you paid are retained as financial records. Conversations you were part of remain visible to the other participant. Commission agreements you were part of — the agreed scope, its status, and the request and quote photos — also remain visible to the other participant. Some records may be retained where required for financial or legal compliance.

Your choices and rights

• Notifications, and location access, are controlled in the app's Settings and iOS Settings.
• You can edit your profile at any time, and block or report other users.
• Depending on where you live (e.g., California, EU/EEA, UK), you may have rights to access, correct, delete, or port your personal data, and to not be discriminated against for exercising them. Contact support@cosplayedapp.com and we'll respond within the time your law requires.

Children

Cosplayed is not directed to children under 13, and you must be old enough to form a binding contract (or have a parent's permission) to buy or sell. If we learn we have collected personal data from a child under 13, we will delete it.

Changes

We'll post changes here and update the effective date. Material changes will be announced in the app.