Privacy Policy
This policy explains what CQCQ collects and how it is used. CQCQ is operated by ZenGrove, which is responsible for your personal data.
What we collect
- Email address, to send your sign-in code and important notices.
- Your wires, greeting and secret wires, including the translation we create for the reader. For a secret wire we also keep its hint, its answer and the attempts made to open it.
- Profile details you choose: your callsign, interests (“frequencies”), language, and country. We also derive an approximate location and time zone from your connection to estimate how far a wire travels. Your city is not shown to other people; they see your country and an approximate distance.
- Safety check results: for each wire, greeting and secret wire, the decision of our automated check, topic flags (for example “meeting” or “minor”) and a short note, kept with the item.
- Reports and blocks you make, and the reported content, kept as evidence for 90 days.
- Basic usage events (for example, first visit) to understand how the service is used, and technical logs needed to run and secure it.
- Device and connection data: a random identifier stored on your device is attached to usage events, reports and secret wire openings, and we use a hashed IP address to limit repeated wrong guesses on secret wires and to prevent abuse. Your sign-in token, cipher and settings are kept in your browser’s local storage. We do not use advertising cookies or third-party trackers.
What other people see
Your greeting wire is shown to other people, including visitors who have not signed up. Next to it, and in your conversations, people see your callsign, country, language, any PLUS badge, your cipher and an approximate distance. Your email address and city are never shown. A secret wire can be read by anyone who has its link and knows the answer.
How we use it
To deliver and translate wires, check them for safety, deliver greetings, prevent abuse, run the service and, for PLUS, process your subscription. We do not sell your personal data.
Who processes it
Service providers process data on our behalf: hosting, email delivery, AI translation and safety checks (see “Transfers abroad” below), and Polar for payments (Polar is the Merchant of Record and handles your payment details; we do not receive your card number).
Transfers abroad
To translate and check wires, we send the wire text to OpenAI, L.L.C. in the United States, when you send a wire, write a greeting or secret wire (including its hint), or when someone reads one in another language. For a wire in a conversation we also send up to three earlier wires of the same conversation, so the check can see the context. We do not send your email address or account identifiers. The purpose is translation and safety checks only, and the provider keeps the text as described in its own API data policy. Translation and checks are part of the service, so if you do not agree to this transfer, please do not use the features that send or read wires.
Your choices
You can edit your profile and delete your account in the app; deleting removes your account, the wires you sent, your greeting, your secret wires and your block list. Records of a PLUS payment are kept by Polar, our Merchant of Record, for as long as tax and accounting law requires; contact us and we will pass on a request to erase other personal data Polar holds about you. Your conversations end for the other person, and the wires they sent stay with them. You can also ask us for a copy of your data or for its correction or deletion at [email protected]. Depending on where you live (for example the EU, UK or Korea) you may have additional rights, including to complain to your data protection authority.
Retention
We keep data while your account exists. Reported content is kept for 90 days. Accounts that never finish signing in are removed after about a week. Backups and legal obligations may keep some data longer.