Cohezion

GDPR overview

There is no mention of the GDPR anywhere on the site: neither GDPR nor General Data Protection Regulation appears once in the privacy policy, the terms of use or any other page collected. No EU representative under Article 27, no data protection officer, no dedicated privacy contact, no data processing agreement, no subprocessor list, no legal basis for processing and no access, rectification, erasure or portability rights are published. The only right described is the ability to stop marketing communications, through an unsubscribe link or an opt-out form. The legal framework invoked is exclusively American: Federal Arbitration Act, Delaware law, California Civil Code 1542, 17 U.S.C. 512. A minimum age of 13 points to COPPA rather than to European rules. The privacy policy is dated 1 May 2023, the terms 1 December 2023.

Who owns the data?

Under the terms of use, all intellectual property in the product and its content belongs to the publisher or its suppliers. Everything you submit or use with the platform counts as User Content, and you alone remain responsible for it: the company has no obligation to back it up and may delete it at any time without notice. Any feedback or suggestion you send is assigned to the company outright, treated as non-confidential and exploitable however it sees fit. The privacy policy says personal information is not sold or rented for third-party marketing without consent, but it is shared with vendors acting on instruction, transfers with the assets in a merger or acquisition, while non-personal information may be disclosed at will to partners and advertisers.

Reuse rights

The licence granted by the terms of use is non-transferable, non-exclusive, revocable and limited, and as written it covers only your own personal noncommercial use of the product, an odd wording for a platform sold to studios: the inconsistency belongs to the source document and is reported here as it stands. You may not sell, rent, distribute, host or commercially exploit the product or its content, reverse-engineer it, or access it in order to build a similar or competing service, and copying, reproducing, republishing or transmitting any part of it is prohibited unless stated otherwise. The acceptable-use rules also forbid collecting or assembling data about other users, email addresses included, without their consent. No clause grants any right to reuse or export commercially the data the platform produces, and backing up your own User Content remains your responsibility.

Data retention & training

Hosting summary

The site publishes no hosting information at all. Neither the privacy policy nor the terms of use names a country, a region, a data centre or a cloud provider, and there is no trust or security page. The only security statements are generic: the privacy policy claims encryption, firewalls and SSL technology, plus password protection of the account, while giving no guarantee. No subprocessor list is published; the policy refers only to unnamed vendors. What is established is the jurisdiction. The publisher, BugByte Tech, Inc., is registered in Delaware, United States, and the legal framework invoked throughout is American: Federal Arbitration Act, Delaware law and Delaware courts. One element was observed rather than declared: the domain resolves to 66.241.124.188, an anycast address belonging to Fly.io, Inc. (AS40509), located in the United States. That is an observation of the public web front end, not a statement by the publisher about where customer data is stored, and it should not be read as one.