Crosia privacy notice

Review and align this draft with the actual live setup and applicable laws before public launch. Crosia is a service of Stooper. For privacy questions and deletion requests, contact hellocs@stooper.co. Our website-wide privacy notice is available at Stooper Privacy Policy.

Data we collect

To submit a post: a private email address, title, post details, category, user-entered city, country, optional area, an optional encounter month for missed connections, and an optional image. To reply: a private email address, reply text and optional consent to exchange contact information. We use an essential session cookie for form protection and time-limited access, and pseudonymous rate-limit records to protect the service. The browser-only test post is held in sessionStorage in your current browser tab; it is not submitted to Crosia. Read our Cookie Policy. We do not require an account or collect continuous GPS location.

What is public

Only approved post titles and text, category, city, country, the month if relevant, and any approved photo. Email addresses and private replies never appear in public cards. Individual post pages are marked noindex, but a noindex tag cannot guarantee a story will never be copied, screenshotted or discovered elsewhere.

Photos and storage

Uploaded images are validated, resized and re-encoded to WebP, which normally removes metadata including embedded GPS EXIF. The photo is stored privately before approval and served publicly only when its post is approved. Do not upload identifiable photos of anyone without permission.

Use and disclosure

Email addresses are used for verification, private reply notifications, access links, safety moderation and explicitly agreed two-way contact sharing. We do not sell contact details. The host and email provider necessarily process data to deliver the service. Administrator moderators may inspect submissions to protect users.

Retention and deletion

Posts are publicly visible for up to 30 days and then expire. The administrator's maintenance purge deletes expired post records and photos seven or more days after expiry. Security rate-limit events are periodically deleted after seven days. You can remove a post and its replies through your private inbox; contact support for removal if you lost access. Server backups may persist under the hosting provider's backup retention rules.

Your controls

Choose any city manually; device location access is not required. Report harmful posts, request removal or stop contact. Messages are kept private until both participants independently agree to share their email addresses. There is no guarantee that an email address proves anyone's real-world identity.

Your confirmations and choices

Before posting, we require confirmation that you are an adult, have image rights, will not reveal private details or engage in harassment, and have accepted the Community Rules and Terms. These confirmations do not replace our own checks or guarantee that content is safe.

International users

Crosia may receive content from users worldwide. Additional notices, consent requirements and handling procedures may be required under applicable laws, including EU/UK privacy laws and Malaysian data protection rules. Public launch should not proceed without these checks.