This Privacy Policy explains how your information is handled on Kosshi Forum at forum.kosshi.app ("Forum"), operated by Junichi Sato ("the Operator"). For Kosshi outside this Forum, see the Kosshi privacy policy. Use of the Forum is also governed by the Terms of Service.
Who Is Responsible
The data controller for this Forum is Junichi Sato, based in Japan. For questions about this policy, account deletion, or other private inquiries, use the contact page.
What This Site Is
The Forum is a public community site for Kosshi ideas, questions, bug reports, and release feedback. It is not a private support channel. Topics, replies, and profile pages that are visible without signing in can be read by anyone on the internet.
For private inquiries, use the contact page instead of posting sensitive details on the Forum.
Account Information
When you create an account, the Operator stores a username, display name, and optional profile text and avatar. Your username, display name, profile text, and avatar are shown publicly on your profile page. Your sign-in email is stored in the Forum authentication database and is never shown publicly.
The Operator uses your sign-in email to operate your Forum account and related Kosshi communication: sign-in codes; account confirmations such as email changes and account deletion; optional Forum notifications for mentions, quotes, replies, and new topics in categories you select; and occasional individual messages when they relate to your account, posts, or feedback. You can change optional notifications in notification settings. These emails are not used for unrelated marketing or sold to third parties.
If you join a product beta through the Forum, it stores your private beta membership status and notification preference. Other Forum members cannot see this information.
Sign-in works through one-time email codes or Sign in with Google, handled directly on forum.kosshi.app. Transactional Forum emails are delivered through Cloudflare.
If you use Sign in with Google, Google processes that sign-in under Google's Privacy Policy; the Operator receives your email address, name, and profile photo from Google and may store OAuth tokens needed to keep that sign-in linked.
Content You Post
Topics, replies, edit history, and image attachments you upload are stored so they can be displayed on the Forum and used to operate the Forum and improve Kosshi, as described in the Terms of Service.
When a new topic or reply is posted, the Forum sends the author's display name, topic title, post link, and a short excerpt to the Operator's private Slack workspace so the Operator can monitor and respond to Forum activity. Slack processes this notification on the Operator's behalf.
Assume anything you post here may be public and long-lived. Do not post passwords, license keys, or other personal information you want to keep private. The Operator may hide content for moderation; hidden content is not shown to members but may remain in backups for a limited time.
Cookies and Browser Storage
The Forum sets HttpOnly authentication cookies after you sign in: a session cookie so the server can recognize your account, and a non-identifying recent-session marker so an expired session can be cleared and sent back to sign-in. During sensitive account changes, the Forum may also set a short-lived HttpOnly step-up cookie so you can complete the action after verifying your sign-in email.
The Forum stores topic read/unread state in your browser localStorage, not on the server, so the topic list can show which threads you have seen. This is a UI preference only and is not used for analytics or advertising.
- The Forum does not set a first-party analytics or advertising cookie.
Rate Limiting
Write actions such as sign-in, posting, hearts, uploads, and account changes are rate-limited to reduce automated abuse.
Analytics
The Operator records aggregate first-party usage metrics, such as daily topic views, profile view counts, searches, sign-ins, new topics, and comments. These metrics are used only to understand how the Forum is used and improve the service; aggregated counts may appear in internal stats pages.
The Forum also records sign-in timestamps linked to your account for operational purposes such as staff administration and abuse prevention. It does not keep logs of who viewed which profile, who viewed which topic, or the text of individual search queries. Topic unique views for signed-in users are counted with a daily one-way key that is not shown in internal reports. Signed-out topic views are not recorded in Forum analytics.
Sign-in sessions may store your IP address and browser user agent to help secure your account. The Forum does not use third-party advertising trackers, analytics pixels, or cross-site profiling.
Legal Basis for Processing
Where applicable law requires a legal basis, the Operator processes Forum data on the following bases: contract, to operate your account and display content you submit; and legitimate interest, to secure the Forum, measure aggregate use, and keep public discussions usable.
Data Retention
You can delete your Forum account from Profile settings. Account deletion removes or anonymizes account profile information, sign-in links, staged uploads, and profile avatars.
Public topics and replies you posted may remain on the Forum under a deleted-user label so public discussions do not break. You can request removal of specific content from the Operator, subject to reasonable backup retention.
The Forum session cookie and recent-session marker are cleared when you sign out. The step-up cookie expires shortly after the sensitive action completes or is abandoned.
International Transfers
Cloudflare, Slack, and Google may process data in countries outside your own under their respective safeguards.
Your Rights
Depending on where you live, you may have rights including access, correction, deletion, objection, suspension of use, or portability regarding personal data held by the Operator. You can delete your Forum account from Profile settings. For other requests, use the contact page.
The Forum operator does not sell personal information or use automated decision-making that produces legal or similarly significant effects.
Changes
The Operator may update this policy from time to time. Changes will be posted on this page along with an updated revision date.
Contact
If you have questions about this policy or wish to exercise your rights, use the contact page.