Privacy Policy

1. Information we collect

Depending on how you use CookieMonsters, we may process account details, profile information, community posts and replies, reactions, friendships, game information, uploaded media, chat data, notification preferences and technical security information such as session, device and IP information.

You choose what profile and community content you provide. Audience and privacy controls apply where a feature offers them.

2. Connected accounts and identity verification

If you connect Discord, Facebook, Steam or another supported provider, we receive the provider information needed for the feature you requested. For identity verification this may include a stable provider account identifier and a display name.

CookieMonsters uses provider bindings to help verify account ownership and security. A locked identity binding is not silently replaced with a different provider account. The Facebook identity-verification flow does not retain the Facebook access token after verification completes.

3. How we use information

• To provide accounts, profiles, community features, messaging, media and game features.
• To protect accounts, prevent abuse and investigate security or moderation issues.
• To send notifications that you have enabled.
• To maintain, troubleshoot and improve CookieMonsters.

We do not sell personal information.

4. Sharing and service providers

Information is shared only when needed to provide a feature you choose, operate infrastructure, comply with law, or protect the service and its members. Third-party providers such as Discord, Meta/Facebook and Steam process information under their own privacy terms when you choose to connect them.

5. Retention and deletion

We retain information for as long as needed to provide the service, meet security and legal obligations, or until you delete it where deletion is available. Some short-lived features automatically expire content. Account deletion requests are handled as described on our Data deletion page.

6. Security

We use technical and organizational safeguards appropriate to the service. No online service can guarantee absolute security, so members should also protect their devices and sign-in methods.

Secure Messages. End-to-end encryption is available for one-to-one conversations. A conversation becomes encrypted after both members have secured a trusted device; activation then happens automatically for that conversation. Messages sent before that point remain part of the earlier non-encrypted history, while new messages after activation use Secure Messages.

For active Secure Messages, CookieMonsters stores encrypted message envelopes and encrypted attachment data rather than message plaintext. The service still processes information needed to operate messaging, such as account and conversation identifiers, device/recovery public-key material, timestamps, retention settings and delivery state. Recovery vault data is encrypted; the Rescue Key is intended to remain with the member on trusted devices or wherever the member chooses to save it.

7. Your choices

You can update many account and profile details in CookieMonsters settings, manage connected features where supported, and request deletion of personal information. Some security bindings may require secure verification rather than an ordinary account edit.

8. Contact

Questions about privacy or personal data can be sent to [email protected].