This Privacy Policy explains how information is handled on the Kosshi community forum at forum.kosshi.app ("Forum"), operated by Junichi Sato, the developer of Kosshi ("Operator"). For the Kosshi app and kosshi.app, see the Kosshi privacy policy. Use of the Forum is also governed by the Terms of Service.
Who Is Responsible
The Operator is the data controller for this Forum and is based in Japan. Questions about this policy, account deletion, or other private inquiries can be sent through the contact page.
What This Site Is
The Forum is a public community site for Kosshi ideas, bug reports, and release feedback. It is not a private support channel. Topics, replies, profile pages, and vote counts that are visible without signing in can be read by anyone on the internet.
For private inquiries, use the contact page instead of posting sensitive details on the Forum.
Account Information
When you create an account, the Operator stores a username, display name, email address, and optional profile text and avatar. Your username, display name, profile text, and avatar are shown publicly on your profile page. Your email address is not displayed on the Forum.
Sign-in is handled through Firebase Authentication (Google, Apple, or email and password). Firebase processes your authentication credentials; the Operator receives your Firebase user ID and the profile fields above.
Authentication is provided by Google (Firebase). See Google's Firebase Privacy Policy for details on the sign-in providers you choose.
Content You Post
Topics, replies, edit history, votes, and image attachments you upload are stored so they can be displayed on the Forum and used to operate the Forum and develop Kosshi, as described in the Terms of Service.
Assume anything you post here may be public and long-lived. Do not post passwords, license keys, or other personal information you want to keep private. The Operator may hide content for moderation; hidden content is not shown to members but may remain in backups for a limited time.
Cookies
The Forum uses the following first-party cookies:
- forum_session — keeps you signed in (HttpOnly, about 14 days).
- forum_visitor — anonymous visitor identifier used to count unique views and first-party usage metrics (HttpOnly, up to one year). It is not used for advertising or cross-site tracking.
Spam Protection
Some write actions use Cloudflare Turnstile. Cloudflare may process technical data needed to distinguish humans from bots. See Cloudflare's Privacy Policy.
Analytics
The Operator records first-party usage events on this Forum, such as topic views, profile views, searches, sign-ins, new topics, comments, and votes. Bot and prefetch traffic is excluded where possible. These events are used only to understand how the Forum is used and to maintain operator tools; aggregated counts may appear in internal stats pages.
The Forum does not use third-party advertising trackers, analytics pixels, or cross-site profiling.
Legal Basis for Processing
Where applicable law requires a legal basis, the Operator processes Forum data on the following bases: (a) contract, to operate your account and display content you submit; (b) legitimate interest, to secure the Forum, measure aggregate use, and keep public discussions usable.
Data Retention
Public posts and profile information remain until you ask the Operator to remove your account or the content is removed for moderation, subject to reasonable backup retention.
Session cookies expire automatically. Messages sent through the kosshi.app contact page are handled under the main site privacy policy, not this Forum policy.
International Transfers
The Operator is based in Japan. Cloudflare, Google (Firebase), and Apple (when you use Sign in with Apple) may process data in countries outside your own under their respective safeguards.
Your Rights
If you reside in the EEA, UK, or California, you may have rights including access, correction, deletion, and objection regarding personal data the Operator holds about you. To request account deletion or a copy of your Forum data, use the contact page. The Operator will respond within 30 days.
The Operator does not sell personal information and does not use automated decision-making that produces legal or similarly significant effects.
Changes
The Operator may update this policy from time to time. Changes will be posted on this page along with an updated revision date.
Contact
Questions about this policy or requests to exercise your rights can be sent through the contact page.