CORD

Privacy Policy

Last updated: October 2026.

What we collect

Your account information (email address, username, display name), the messages and files you choose to share, and technical details needed to run the service, such as connection logs (including IP addresses) and the devices you sign in from.

The website and the desktop app also keep a random device ID in your browser's storage. It isn't read from your hardware or made from anything about your device, and clearing your browser's data replaces it. We store only a scrambled (hashed) form of it with your sign-ins, and use it to keep accounts secure and to stop a device that was used for abuse from signing in again.

How it's used

To deliver the product: showing your messages to the people you send them to, keeping accounts secure (including sign-in alerts and two-factor authentication), preventing abuse, and fixing problems.

What we don't do

We don't sell your personal data, and we don't show advertising. We don't read your messages, including direct messages, to target or profile you.

Reports and moderation

When content is reported, our team reviews the report and the reported content to enforce the Community Guidelines. When we investigate fraud, scams, abuse or a legal request involving an account, the platform owner may review that account's messages, including direct messages, and the sign-in history, IP addresses and devices linked to it. This access is only used for investigations, requires a stated reason, and every review is logged.

Retention and deletion

Deleting a message removes its content. Closing your account anonymizes your profile and deletes your personal data, while keeping the records we are required to retain for safety and legal reasons.

Security

Passwords are never stored in readable form. Sessions can be reviewed and revoked from your settings, and optional two-factor authentication is available to every account.

Contact

Privacy questions go to the support address listed on our site.