Privacy Policy - Cold Board

This Privacy Policy explains how Cold Board ("we," "us," or "our") collects, uses, discloses, and protects information when you use coldcaseboard.app (the "Service"). By using the Service, you agree to this Policy.

1. Information We Collect

Account information: email address, display name, password (hashed), and any profile details you choose to provide.

User-generated content: theories, comments, votes, posts, and other contributions you submit.

Payment information: when you subscribe to a paid plan, payments are processed by Stripe. We do not store your full card details on our servers. We retain limited billing metadata such as plan, status, and transaction IDs.

Usage data: log data, IP address, browser type, device information, pages visited, and timestamps, collected automatically.

Cookies: we use cookies and similar technologies to keep you signed in and to understand usage.

2. How We Use Information

To provide, operate, and maintain the Service
To process payments and manage subscriptions
To moderate content and enforce our Terms of Service
To communicate with you about your account or the Service
To improve the Service, including analytics and bug fixes
To comply with legal obligations and respond to lawful requests

3. How We Share Information

We do not sell your personal information. We share information only with:

Service providers (e.g., Stripe for payments, hosting and database providers, email and analytics vendors) acting on our behalf
Law enforcement or regulators where required by law or to protect rights, safety, or property
Other users, to the extent that you choose to post publicly (your display name, theories, comments, and votes are visible to other users)

4. Public Content and Real Cases

The Service hosts community discussion of real criminal cases and real persons. Content you post — including your display name, theories, comments, and votes — is publicly visible and may be indexed by search engines. Do not post information you consider private. All user-submitted theories and comments are expressions of personal opinion only and are not statements of fact. Cold Board does not investigate, verify, endorse, or adopt any user theory. Be aware that statements about real, identifiable individuals may have legal consequences, and you are solely responsible for the content you post.

5. Data Retention

We retain account and content data for as long as your account is active or as needed to provide the Service. We may retain certain information after account deletion to comply with legal obligations, resolve disputes, and enforce our agreements.

6. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live (e.g., the EEA, UK, California), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the information below. Users can control cookie preferences through their browser settings. California residents may also submit data requests by contacting us via our Contact page. We do not sell personal information as defined under the California Consumer Privacy Act.

8. Children

The Service is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.

9. International Users

Your information may be processed in countries other than your own. By using the Service, you consent to such transfer and processing.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date and, where appropriate, by additional notice.

11. Contact

For privacy questions or requests, visit our Contact page.