Privacy and cookies.

This Privacy Policy explains what data Cogpit ("we", "us") collects and how we use it. The data controller is Cogpit, based in Gothenburg, Sweden. For the rules governing use of the Service — including beta access, plan changes, acceptable use, and liability — see our Terms of Service. This is a plain-language summary and is not legal advice.

Windows application

Cogpit stores your project list and preferences locally in the Windows registry under HKCU\Software\Cogpit, and a sign-in token encrypted with Windows DPAPI. The app does not send general telemetry. Some features require an account and a working internet connection.

Account data

If you create an account we process your email address, username, authentication data (a salted password hash — never your plain password), subscription/plan status, and activity statistics needed to operate your profile, entitlement and leaderboard entry.

Payments

Payments are processed by Stripe; Cogpit never sees or stores your full card details. We store your plan, status, and Stripe customer/subscription identifiers so we can manage your access and let you cancel. Billing terms (auto-renewal, cancellation, refunds) are in the Terms of Service.

Remote, Crew co-op and your IP address

Crew co-op and Remote create direct peer-to-peer connections. When you host or join, your IP address is exposed to the peers you connect with. We do not proxy, monitor or store the content of these direct connections. Please read the caution in our Terms of Service before using them, and be careful who you share connect details with.

Support requests

When you contact support or report a bug we store the email, subject and message you submit, any app version/operating-system string you include, and a one-way hash of your IP address (never the raw IP) used only to prevent abuse and spam. We use this solely to respond to and handle your request.

Account deletion and retention

You can request deletion of your account. Deleted accounts are first moved to an internal archive so they can be restored if needed. If you want your personal data permanently erased, contact us and we will honour applicable legal erasure requests. We keep data only as long as needed to operate the Service or meet legal obligations.

Cookies

We use two categories of cookies / local storage:

• Essential — a sign-in token kept in your browser's local storage and your cookie choice. These are required for the site to work and are used without consent.
• Advertising (non-essential) — Google AdSense. These load only after you choose “Accept all” in the cookie banner. If you reject them, no advertising scripts or cookies are loaded.

You can change or withdraw your choice at any time: Cookie settings.

• Manage personalized advertising in Google Ads Settings.
• Read how Google uses data on partner sites.
• Additional opt-out tools are available from aboutads.info and Your Online Choices.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your account data, and you can withdraw consent at any time. To make a request, contact us via Support from the email address on your account.

Changes to this policy

We may update this page from time to time; the "last updated" date above reflects the current version. For privacy questions or data requests, contact us via Support.