Privacy Policy
Codogotchi is a small, owner-operated project. This policy describes the data we collect when you sign in and share pets in the gallery, why we collect it, and how to remove it. We keep the surface small on purpose: no advertising, no third-party analytics or tracking.
Last updated: June 11, 2026
What we collect
Account & sign-in
You can sign in with Google, GitHub, or an email and password. When you use Google or GitHub, we receive your email address, display name, and avatar image from that provider. When you register with a password, we store your email address and a hashed password (handled by our authentication library — we never see your plaintext password) and send a one-time verification code to confirm the address. You also choose a public username.
Pets you upload
When you publish a pet we store the package itself (a
server-revalidated, re-packed .zip of spritesheets and manifest), an optional thumbnail image
generated in your browser from the uploaded sheet (when available),
the display name and description you write, and the tiers the
package contains. We also keep a running, aggregate
download count per pet.
Site analytics
This site uses Vercel Web Analytics to collect aggregate page-view and visitor counts. Vercel Analytics is cookieless and does not track individuals across sites — it uses hashed, anonymised signals rather than persistent identifiers. No personal data is shared with Vercel beyond what your browser sends in a normal HTTP request.
What we do not collect
Downloading a pet via npx codogotchi add, curl, or direct .zip does not require an account and is not tied to your identity — we
count downloads in aggregate only. Clicking the macOS DMG download
button records a single timestamp (no IP address or other identifier)
so we can count installs. We do not run advertising or behavioural
tracking, and the gallery sets no tracking cookies. The desktop app's
local RPG data stays on your machine under
~/.codogotchi and
is governed by the app, not this gallery.
How we use it
- To authenticate you and keep you signed in.
- To attribute pets you upload to your public username.
- To host, validate, and serve pet packages for download.
- To send transactional email — only the email-verification code for password sign-up. We do not send marketing email.
- To operate the service safely: moderating reported content and honoring takedowns.
Where your data lives
Accounts, pet metadata, and uploaded files are stored on Convex (database and file storage). Email verification codes are delivered through Resend. Sign-in is handled by Google, GitHub, or our own password provider depending on the method you choose. These providers process your data on our behalf under their own privacy terms.
Public content
Anything tied to a published pet is public: your username, the pet's display name and description, its thumbnail and animation frames, and the downloadable package. Do not put information in a pet, username, or description that you would not want shown publicly.
Your choices
- You can browse and install pets without an account.
- You can request deletion of your account and uploaded pets by emailing us (see below).
- You can request that a specific pet be unlisted or removed — yours or one that infringes your rights.
Retention & deletion
We keep account and pet data for as long as the account is active. The operator can unlist any pet instantly, which immediately removes it from the gallery and download endpoints. On a deletion request we remove your account record and the pet packages you uploaded. Aggregate, non-identifying counts may persist.
Questions, deletion requests, or takedowns: admin@codogotchi.app. See also our Terms.