Privacy

What we collect

• Your email address, for sign-in.
• Your name and profile picture from your sign-in provider, shown to you inside the product.
• The reviews you save: titles, captured screenshots, comments you write or dictate, and product URLs you paste in.
• Standard server logs from our hosting providers: IP address, browser user-agent, and request timestamps.

We do not run third-party analytics that profile you across the web. We do not run advertising trackers.

Signing in with Google

If you sign in with Google, Google sends us a small set of information about your account:

• Email address. We use this to identify your account and to send you transactional messages.
• Name. Shown to you inside the product so you know which account you're signed in to.
• Google account ID. A stable identifier we store so we recognize your account when you come back.
• Profile picture URL. Displayed in the product UI; not republished or sold.

That's it. We do not request access to Gmail, Drive, Calendar, Contacts, Sheets, Docs, or any other Google service. CobaltCapture's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell this data. We do not share it with third parties for their own advertising. We do not use it to train machine learning or AI models.

You can revoke our access at any time from your Google Account permissions page, or by deleting your CobaltCapture account.

What we share

• Public reviews. When you finish a review, CobaltCapture gives it a public URL. Anyone with that URL can read the review, including the title, screenshots, and your comments. That's the whole point of the product. Don't capture anything you wouldn't want a recipient to see.
• Sub-processors. We use a small set of vendors to operate the service. They process data on our behalf under their own terms.
  • Neon — managed PostgreSQL hosting for review data.
  • Railway — runs the web application.
  • Cloudflare — DNS, CDN, and R2 object storage for screenshots.
  • Supabase — handles authentication when you sign in.

We do not sell your data. We do not run ad trackers.

Cookies and local storage

We use first-party browser storage to keep you signed in and to remember your in-progress work. We do not use third-party advertising cookies or cross-site tracking.

Your choices

• You can delete any review from your reviews list. Deleting removes it from our database and removes its screenshots from object storage.
• You can sign out at any time from the product.
• You can revoke Google's connection from your Google Account permissions page.
• To delete your account and all associated data, contact us.

Email communications

When you create an account, you'll receive transactional emails (sign-in, account information, material service changes) and occasional product updates about CobaltCapture. You can opt out of product updates at any time using the unsubscribe link in any email or from your account settings. Transactional emails are required to use the service and cannot be opted out of while your account is active. We do not share your email address with third parties for their own marketing, and we do not use your email to market other products in the Middlefield General Services portfolio without your separate explicit consent.

Data retention

Reviews you save remain available until you delete them. If you close your account, we remove your reviews and the associated screenshots from object storage. Standard server logs are retained for a short window by our hosting providers under their own policies.

Children's data

The service is not intended for anyone under 13 (or 16 in the EU). We do not knowingly collect data from children.

Where we operate

We operate from the United States. By using the service you acknowledge your data is processed in the US.

Questions

If something here is unclear, get in touch.