How we handle your data

1. Who we are

Cosmopedia is operated by Unity Nodes. It is a read-only aggregator of publicly available Cosmos content (forum, docs, GitHub discussions and issues, whitepapers, blog, releases). No accounts, no logins, no profiles.

Contact: contact form

2. What we collect

Only what running the service needs. Specifically:

• Visit log: for each page view we store the path, referrer, user agent, a random session identifier from a first-party cookie, and the time. No IP address, hashed or otherwise. Purged after 180 days.
• Search and API logs: the text of searches you run on the site or through the API, the number of results, and the client type; for MCP tool calls the tool name and its parameters; for REST calls the endpoint, method, status and timing. No IP address is stored with a search. Purged after 180 days.
• For rate-limiting only: your IP address, stored in our SQLite database for up to 7 days and then purged. We use it to stop one client from monopolising the service. We don't link it to any identity.
• What you send through a form: the contact form takes your name, email and message, plus your IP address so we can act on abuse. We email it to ourselves, keep a row recording that a submission happened, and post a copy of the name, email and message to a private Discord channel so the enquiry is actually noticed. The IP is not sent to Discord, and it is erased from our database after 180 days — past that there is no abuse report left to act on. We keep the message for as long as we need it to answer you.
• Theme preference: light/dark, stored in your browser's localStorage. Never reaches our server.

We never ask for a name or an email to browse, only in the form above where you choose to give them, and we load no advertising tags or cross-site trackers.

3. Third-party services

When a client uses semantic search through the MCP server or the API, the query text is forwarded to one provider, which processes it under its own privacy terms:

• OpenAI (turns the query into an embedding): privacy

We don't control how long they keep it. Don't put confidential information into a search.

Separately, when you submit the contact form we post your name, email and message to a private Discord channel we control, so the enquiry is seen rather than buried. Discord processes it under its own privacy policy. Your IP address is not sent there.

4. Cookies

One first-party cookie carrying a random session identifier, used to group visits and calls into sessions. No marketing cookies, no third-party trackers. You can clear it in your browser at any time.

5. Your rights

You can ask us to show or delete whatever rate-limit record we have on you, and anything you sent through the contact form. Use the contact form. For a rate-limit record include the IP address you used, and for a form submission the email address you gave, since that is the only identifier stored with it. We'll reply within 30 days.

6. Security

Served over HTTPS. The site runs on a server we operate ourselves and the SQLite database lives on that server. We do not sell it, share it with advertisers, or hand it to anyone beyond the specific services named in section 3.

7. Changes

If anything material changes we'll bump the date at the top. Continued use after a change means you accept the update.