Privacy policy

The controller of your data is the publisher of Cosmose, Corentin Deleuse, sole proprietor (EI), identified in the legal notice. For any question or request about your data: privacy@cosmose.app. Cosmose has not designated a data protection officer.

• You enter with a nickname: Cosmose asks for neither a name, nor a postal address, nor an identity document.
• Cosmose knows the town you choose, never your position: no geolocation is requested from your device, and others only see a distance in whole kilometres.
• No advertising, no audience measurement, no third-party tracker, no sale of data.
• Your photos and videos are automatically compared against a database of already known child sexual abuse material, and against nothing else. Nobody at Cosmose reads your private conversations, unless a message is reported.
• You can delete your account at any time, in a minute, from Settings, and download your data beforehand.

For each use: the data concerned, why we process it, on which legal basis of the GDPR, and how long we keep it. Durations are summarised in section 6.

Entering and holding an account

Your profile and what others see

Other members (temporary accounts included) see: your nickname, your gender or your couple with its two genders, your age, your town, the distance between you in whole kilometres, what you are looking for, your account level, whether you are online, your bio, your interests and your profile photos. They never see your e-mail address, your date of birth or your coordinates. You can disappear from the “People” list (invisible mode) from Settings; your conversations continue.

Profile photos are uploaded to a private space; the displayed versions are served through temporary signed addresses, after removal of metadata (including position). Basis: contract. Duration: until they are deleted or the account is.

Private conversations, rooms, posts

Age verification

To share or view photos and videos, or to broadcast and watch a live, you verify your age with AgeVerif, an independent provider, on its own site. Cosmose receives neither your documents, nor your identity, nor your country: only a verification identifier, the assurance level, the verified age threshold and the dates. Basis: legitimate interest and obligations to protect minors. Duration: life of the account; the verification holds until moderation revokes it, in which case the trace of the revocation is kept.

Detection of child sexual abuse material

Every photo and video you upload (profile, private conversation, room, post) is transmitted, before any publication, to Shield, a service of the Canadian Centre for Child Protection (Project Arachnid), which compares it against the fingerprints of content already identified as child sexual abuse material. The file is transmitted without your identity or any information about your account. Nothing is kept for a file that is not recognised, apart from the version of the database used. Published content is checked again as that database grows.

For private conversations, this detection is carried out under Regulation (EU) 2026/1881, which temporarily allows messaging services to voluntarily detect such content, subject to conditions; it covers images and videos only, does not read your texts, and uses only fingerprints of known content. Basis: public interest and legitimate interest, within that legal framework. If content is recognised, it is quarantined, a case is opened, and the following are kept: the classification given by the provider, the fingerprints of your file, the file itself as evidence, and your account identifier. These data alone are kept for twelve months after the detection; for the duration of the procedure when the authorities are involved.

Reports and moderation

Reports are examined by people on the moderation team, who only access the reported content and its immediate context, never all of your conversations. Each of their reads is logged. The media of a case involving a minor are never displayed to the team.

Security of the service and fight against abuse

Legal obligations: identification data

French law (law for confidence in the digital economy, article 6-II, and decree no. 2021-1362) requires hosting providers to keep, for the sole needs of criminal proceedings and at the sole disposal of the judicial authorities, the data that identifies the author of content. Cosmose keeps for that purpose, in a separate space the application does not access:

• the e-mail address and date of birth of a Cosmose account: five years after the closure of the account;
• the nickname or nicknames used: one year after the closure of the account;
• the full IP address and connection port when the account is created and when each content is published (message, comment, post, room, media): one year from the event.

Basis: legal obligation. This data serves nothing else; it is only consulted to answer a legal request, and each consultation is logged.

Write to us

When you write to the team from the app: your message, the address you want an answer at (your account’s, or the one you give), the page you write from, the language, the window size and the browser, to understand a problem. Basis: legitimate interest (answering you and improving the service). Duration: one year after your request is closed. If you delete your account, your message is kept without your identity.

E-mails

Cosmose only sends necessary e-mails: entry and reset codes, security confirmations (password changed, Google account linked or unlinked), moderation notices, acknowledgements and answers to your reports and messages, a warning before an inactive account is deleted, confirmation of deletion. No marketing, no newsletter.

Beta and Premium

During the beta, the date of your first session and your account type are recorded so that participants can be thanked later. Premium is granted by Cosmose; no payment data exists. Basis: contract. Duration: life of the account.

Your gender, your couple status with your partner’s gender, and what you are looking for (chat, friendship, dating, serious relationship, casual dating) are shown on your profile and used in other members’ searches. Together, this information may reveal your sexual orientation, which the GDPR counts among sensitive data (article 9).

That is why Cosmose asks you, at entry, for an explicit consent separate from the acceptance of the terms, and records its date. You can withdraw it at any time from Settings › Privacy: “what I am looking for” is then erased. Your gender and your couple define your profile and can only be removed by deleting the account. Withdrawal does not call into question what was done before.

Your bio and your interests are free text: what you write there is visible to every member. Put nothing there you do not want to make public.

• Other members, for what you make visible (section 3, “Your profile”) and what you send them.
• The Cosmose team, within what moderation, support and security require; access to a case’s content is individual, justified and logged.
• Our providers, which process data on our behalf and under our instructions (section 7).
• The authorities, when the law requires it: judicial requests, requests from the competent administrative authorities, reporting of illegal content provided for by law.

Cosmose does not sell, rent or pass on your data to anyone.

Cosmose relies on providers that process data on its behalf, bound by a processing contract compliant with article 28 of the GDPR, except those acting on their own behalf, marked in the table. Your data is hosted in the European Union. Some providers are established outside the Union or may route data through it; the table gives, for each, the safeguard that frames the transfer.

Cosmose only uses cookies and local storage that are strictly necessary to the service or limited to your display preferences. None of them serves to track you, measure audience or deliver advertising; the law therefore does not require your consent, and Cosmose shows no banner.

You can delete these cookies and this storage from your browser; Cosmose will then ask you to sign in again.

You have the rights provided by the GDPR and the French Data Protection Act:

• Access and portability: download your data from Settings › Data and account, in a readable file (JSON). Once a day.
• Rectification: change your profile, your town, your e-mail address and your password from the app. Gender and couple status cannot be changed from the app: write to us.
• Erasure: delete your account from Settings › Data and account; the effect is immediate (section 6). What must be kept by legal obligation or for an ongoing procedure is kept, and only for that.
• Withdrawal of consent to sensitive data: Settings › Privacy (section 4).
• Objection and restriction: for processing based on our legitimate interest, write to us explaining your situation.
• Post-mortem directives: you can tell us what should become of your account.
• Complaint: with the CNIL (cnil.fr), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.

To exercise a right that is not available in the app, write to privacy@cosmose.app from your account’s address, or from the app while signed in to your account. We answer within one month, extendable by two months for a complex request, and may ask you to confirm your identity with a code sent to your address. A temporary account, which has no address, exercises its rights from the app while its session is open.

Cosmose is for adults only and does not knowingly collect data about minors. If you learn that a minor is using Cosmose, report them with the reason “Minor or person in danger” or write to us: the account is closed and its data erased, subject to what the law requires us to keep.

Encrypted exchanges (HTTPS), passwords hashed with a resistant algorithm (Argon2id), sessions and codes stored hashed, photos and videos reachable through temporary signed addresses, compartmentalised team access with a second factor and a log of every access, providers chosen for their guarantees. No system is infallible: in case of a data breach likely to affect you, we inform you as the law provides.

Version 2026-10-07. This policy evolves with the service. A change that alters what we do with your data is shown to you the next time you enter; others are published here with their date.