Privacy Policy

Last updated 2026-10-23

This policy explains what information Oath LLC (“Oath”, “we”, “us”) collects when you use the Cosmite app, the website at cosmite.chat, and the services behind them (together, “Cosmite”), how we use and share it, and the choices you have. It is part of our Terms of Service. By using Cosmite, you agree to this policy. If you don’t agree, don’t use Cosmite.

1. Information you give us

  • Account information: your Login ID, email address, display name and password. We store your password only as a secure hash, never as the password itself.
  • Profile information: your avatar, and anything else you add to your profile.
  • Content: the messages, images, emoji, reactions, space names and icons, invite links and anything else you post, send or upload.
  • Files: when you send a picture, video, audio or other file, we store it with its name, type and size, its dimensions or length where it has them, a description and a spoiler mark if you add them, whether it is a program, and a fingerprint of the file when your app makes one. Before a picture leaves your device, the Cosmite app removes the location and camera details stored in it, and before a video leaves it, the location. Other files are stored as you send them, with anything they carry, such as a document’s author.
  • Your connections: friends, blocks, message requests, the spaces you join, and your roles and permissions in them.
  • Payments: when you buy Cosmite Flare, Stripe collects your payment details. We receive your plan, subscription status, payment dates and the identifiers Stripe uses for you, but not your full card number.
  • Messages to us: what you send us by email, through the contact form or on cosmite.chat’s Support page, such as support requests, reports and feedback. When you report a message or a person from the app, your report also includes who it is about, where it happened and a copy of the message you reported. We don’t tell the person you report who reported them.

2. Information we collect automatically

  • Technical information: your IP address, the app and system versions, connection times, sign-in attempts, session information, and records of requests to our servers. We use these to run Cosmite, keep it secure, and limit abuse, such as repeated failed sign-ins, many accounts made from one network, or too many uploads. To limit uploads and sign-ups from one network, we keep a scrambled identity for that network for up to 48 hours.
  • Delivery information: who sends what to whom, when, and how large it is, so we can deliver messages and calls, including end-to-end encrypted ones.
  • Voice: calls are relayed live through our servers to reach the other people in the call. We don’t record calls.
  • Cookies: cosmite.chat uses cookies that keep you signed in and protect forms. We may also use cookies or similar tools to understand how the website is used.
  • On your device: the app keeps a local copy of your messages, your settings and diagnostic logs on your computer. Diagnostic logs stay on your device unless you send them to us.

3. Information from others

  • Other people can share content that mentions you, invite you to spaces, send you message requests or add you as a friend.
  • Your account is shared between the app and cosmite.chat, so information you give on one reaches the other.
  • Stripe tells us whether your payments succeed.

4. How we use information

We use the information we collect to:

  • provide, run, maintain, improve and develop Cosmite, including new features;
  • deliver your messages and calls, and keep your account in sync between the app and cosmite.chat;
  • process payments and manage Flare;
  • keep Cosmite, our users and Oath safe; prevent fraud, spam and abuse; and enforce our terms;
  • communicate with you about your account, security, changes to Cosmite or our policies, and support. We may also send you news about Cosmite, which you can opt out of at any time;
  • understand how Cosmite is used, including through statistics that don’t identify you;
  • follow the law and respond to legal requests;
  • for any other purpose we describe when we collect the information, or with your consent.

We may use information that has been aggregated or de-identified, so that it no longer identifies you, for any purpose.

5. End-to-end encryption

Direct messages, and private channels where it is turned on, can be end-to-end encrypted. We can’t read end-to-end encrypted messages. We still process the delivery information in section 2 to deliver them. If you report a message from an end-to-end encrypted chat, your report includes the message as you see it, so we can read that copy. Files aren’t end-to-end encrypted, and they can’t be sent in end-to-end encrypted chats yet.

6. How we share information

  • With the people you talk to. Your display name, public UID and avatar, and the content you post, are visible to the people in the conversations, channels and spaces you take part in. Profile images, space icons, and pictures, videos and audio in messages can be viewed by anyone who has their link. Other files can be downloaded by anyone with a download link, which works for a day. A file someone saves or forwards out of Cosmite can reach people outside the conversation. Listed spaces can be found by anyone in Browse Spaces.
  • With service providers. Companies that help us run Cosmite, such as hosting and network providers (including Cloudflare), Stripe for payments and Zoho for email, process information for us.
  • With services you use through Cosmite. When you search for or send a GIF, your device sends your search and the GIF you chose to KLIPY. When a message contains a link, your device may load a preview or video from that site, such as YouTube, Vimeo, Tenor or GIPHY. These sites can see your IP address, and their own privacy policies apply.
  • For legal and safety reasons. We may share information when we believe the law requires it, to respond to legal requests, to protect the rights, property or safety of our users, Oath or others, and to report child sexual abuse material to the authorities. Pictures in Cosmite, and the still frame shown for each video, are compared automatically with lists of known child sexual abuse material, using a service Cloudflare provides. When one matches, or a file someone reports turns out to be such material, we take it down and report it, with the account that sent it, to the National Center for Missing & Exploited Children (NCMEC), as US law requires.
  • If Oath changes hands. If Oath or Cosmite is reorganized, sold or merged, information may be transferred as part of that.
  • With your consent, or at your direction.

We don’t sell your personal information.

7. How long we keep information

We keep information for as long as your account is active and as long as we need it for the purposes in this policy. What happens to an account, and to the content bound to it, depends on how it stops being used:

  • Accounts you stop using. An account that isn’t used stays as it is, with its content, until you come back or ask us to delete it. We may close an account that has gone unused for a long time, and we’ll try to tell you first.
  • Accounts we suspend or close. If we suspend or close an account under our Terms of Service, it can no longer be used. What it posted stays where it was posted unless we remove it, for example because it breaks our rules. We keep the account’s information for as long as we need it for the reasons below, such as keeping banned people from returning.
  • Accounts you delete. When we delete an account at its owner’s request, we delete its Login ID, email address, password, display name, avatar and profile, its settings, and its friends, blocks and message requests. Messages and other content it posted in conversations and spaces stay visible to the people there, but without the account’s name or avatar, unless the owner deletes them first. Files it sent are deleted with the account. Before deleting an account that owns spaces, we ask its owner whether to delete each space or hand it to another member. If they don’t choose, we may do either.

Your support conversations, including your reports and the copies of messages they include, are kept with your account until it is deleted, even if a message you reported is deleted later.

A file is kept as long as the message it was sent in. When the message is deleted, the file is deleted from our storage and from Cloudflare’s network within minutes, and its download links stop working. A file that was uploaded but never sent is deleted within a day of its upload.

To set upload limits, we keep for 400 days the days on which your account sent a message, reports about it, its messages that staff removed, and uploads of it we turned down.

When content or an account is deleted, copies can remain in backups for a limited time before they are gone. We may keep some information longer when we need it to follow the law, resolve disputes, keep Cosmite secure, prevent abuse, or enforce our terms, for example to keep banned people from returning. When we report a file to the authorities, we keep a copy of it, with its message and the account that sent it, for one year after the report, or longer if the authorities ask.

8. Security

We protect information with measures such as password hashing, encrypted connections and optional end-to-end encryption. No system is completely secure, and we can’t guarantee the security of your information.

9. Your choices

  • You can change your display name, Login ID, password and avatar in the app.
  • You can choose who can message you or call you, and block people, in the app’s settings.
  • You can opt out of news emails with the link in any of them, or by emailing us.
  • To ask for a copy of your information, to correct it, or to delete your account, email contact@cosmite.chat. We may need to confirm that the account is yours.
  • Cosmite doesn’t respond to “Do Not Track” browser signals.

10. Your rights where you live

Depending on where you live, you may have the right to access, correct, delete or get a copy of your information, to object to or restrict some uses of it, and to withdraw consent. To use these rights, email contact@cosmite.chat. We’ll respond as the law where you live requires.

If you are in the European Economic Area or the United Kingdom, we use your information to provide Cosmite under our agreement with you, for our legitimate interests in running, securing and improving Cosmite, to follow the law, and with your consent where we ask for it. You can complain to your local data protection authority.

11. Children

Cosmite is not for children under 13. We don’t knowingly collect information from children under 13. If we learn that we have, we’ll delete it and close the account. If you believe a child under 13 is using Cosmite, email contact@cosmite.chat.

12. Where information is kept

Oath is based in the United States, and we store and process information in the United States. Cloudflare, which stores and delivers files, avatars and icons for us, also keeps short-lived copies of pictures, videos, audio, avatars and icons in its data centers around the world, so they load quickly. If you use Cosmite from another country, your information is transferred to the United States, where privacy laws may differ from those where you live.

13. Changes to this policy

We may change this policy at any time by posting a new version with a new date. If a change is significant, we’ll also tell you in Cosmite or by email at least 7 days before it takes effect, unless it needs to take effect sooner to follow the law, protect people or stop abuse. If you keep using Cosmite after a change takes effect, you accept it.

14. Contact

Questions about this policy or your information: contact@cosmite.chat.

Oath LLC, 139 E Howard Ave, Eugene, Oregon 97404, USA.