Who we are
Cordia is operated by an individual developer based in Latvia, trading as Cordia ("Cordia", "we", "us"). Cordia is not currently run by a company. If that changes, this policy will be updated before any of your data is transferred to a new entity.
For the personal data described in this policy, Cordia is the data controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
You can reach us about anything in this policy at admin@cordia.ext.io.
If the operator is established outside the EU or EEA but offers Cordia to people there, an EU representative is appointed under Article 27 GDPR, and their contact details are published in this section. If no representative is listed, the operator is established within the EU or EEA and no representative is required.
What this policy covers
This policy applies to the Cordia web app, the installable web app, the desktop applications, and this website. It does not apply to third-party sites or services that Cordia links to, or to communities that run their own Cordia server independently of us.
This policy explains how we handle personal data. The rules you agree to when you use Cordia are in our Terms of Service. This policy is not a contract and does not create one.
What we collect
Account and profile information
- Username, email address, and a hashed password
- Profile details such as avatar, banner, bio, status text, and presence
- Roles, badges, and community membership
Content you create
- Server and channel messages, direct messages, and attachments
- Reactions, polls, events, reports, friend requests, and read state
- Server configuration such as channels, groups, and permissions
Technical and usage information
- IP address, browser type, device information, and timestamps
- Request logs and diagnostic data used to operate and secure the service
- Call metadata such as participants and call duration — call audio and video are peer-to-peer and are not recorded by Cordia
- Push subscription details if you enable notifications
Information we receive from other people
- Your username and profile when someone adds you as a friend, mentions you, or adds you to a community
- Reports that other users submit about your content or account
- Moderation records created by community moderators
Donations
- Cordia has no paid plan, so we hold no payment method, invoice or subscription record for you
- Donations are made on Buy Me a Coffee's own site; we are told that someone donated, not who or how much
- Card numbers and security codes never reach our servers — they never leave that site
Why we process it, and on what legal basis
Under Article 6 GDPR we must have a legal basis for each purpose. These are the bases we rely on.
Providing the service — contract
We process account, profile, content, and delivery data to create your account, store and deliver your messages, run calls, sync your devices, and show you your communities. Without this data we cannot provide Cordia. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
Safety, security, and abuse prevention — legitimate interests
We process technical data, logs, and moderation records to detect abuse, prevent spam and attacks, enforce our Terms, keep the service available, and protect users. Legal basis: our legitimate interests (Article 6(1)(f) GDPR) in operating a safe service. We have balanced those interests against your rights and only process what is needed for that purpose.
Diagnostics and product improvement — legitimate interests
We process aggregated diagnostic and error data to fix defects and improve reliability. Legal basis: legitimate interests (Article 6(1)(f) GDPR). We do not use the content of your messages for this purpose.
Legal obligations — legal obligation
We may process and retain data where the law requires it, for example to respond to a valid legal order or to keep records we are obliged to keep. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).
Notifications and optional features — consent
Push notifications and other optional features that are not necessary for the service are only activated when you turn them on. Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time in settings or by disabling notifications on your device, without affecting your use of the rest of Cordia.
We do not sell your personal data, we do not use your messages to build advertising profiles, and we do not run third-party advertising or analytics tracking on Cordia or on this website.
Sensitive information
Cordia is a general-purpose chat service, so people sometimes mention health, religious or philosophical beliefs, political opinions, trade union membership, sex life or sexual orientation, or other information that Article 9 GDPR treats as a special category. We do not ask for this information and we do not use it for any purpose of our own.
Please do not post special category data in server channels, where other members and moderators can read it. We do not have a legal condition under Article 9 to process it beyond storing it as part of the content you choose to send.
Encryption and direct messages
Direct messages in Cordia are end-to-end encrypted with X3DH and the Double Ratchet. Your keys stay on your device and are protected by device unlock and an optional recovery code. Cordia cannot read the contents of your direct messages.
Server channels are not end-to-end encrypted. They are visible to members with access to that channel and can be managed by server moderators and administrators. Share accordingly.
Even for encrypted messages, Cordia processes metadata needed to deliver them, such as the sender and recipient, timestamps, message size, and delivery status. That metadata is covered by this policy in the same way as other technical data.
Because of end-to-end encryption, there is data we genuinely cannot read, export, or correct for you. Where Article 11 GDPR applies, we will tell you what we can and cannot do with a request rather than simply refusing it.
International transfers
Cordia's servers are located in [HOSTING REGION]. Where we or a processor transfer personal data outside the EU or EEA, we rely on one of the safeguards permitted by Chapter V GDPR:
- an adequacy decision of the European Commission, including the EU–US Data Privacy Framework where the recipient is certified
- the European Commission's Standard Contractual Clauses (2021/914), together with any supplementary measures required by a transfer impact assessment
You can ask us for more information about the safeguard that applies to a specific transfer at admin@cordia.ext.io.
How long we keep it
We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires.
- Account and profile data — while your account is open, and for 30 days after you delete it, so the deletion can be reversed if it was a mistake
- Channel messages and attachments — until you or a moderator deletes them, or until the community or your account is deleted
- Encrypted direct messages — stored as ciphertext until deleted; we cannot read them, and deleting them removes the ciphertext we hold, though copies may remain on the recipient's device
- Server and request logs — 30 days
- Backups — up to 90 days, after which they are overwritten on a rolling basis
- Reports and moderation records — up to 12 months, so we can handle appeals and detect repeat abuse
- Push subscriptions — until you disable notifications or delete your account
Where we cannot delete data because it is in a backup, we isolate it and delete it when the backup expires.
Your rights
If you are in the EU or EEA, or anywhere else with equivalent laws, you have the following rights over your personal data:
- Access — a copy of the personal data we hold about you (Article 15 GDPR)
- Rectification — correction of inaccurate or incomplete data (Article 16)
- Erasure — deletion of your data, subject to legal retention duties (Article 17)
- Restriction — a limit on how we use your data while a question is resolved (Article 18)
- Portability — a machine-readable export of data you provided to us (Article 20)
- Objection — object to processing based on our legitimate interests (Article 21)
- Withdraw consent — at any time, where we rely on consent (Article 7(3))
- Complaint — to a supervisory authority (see below)
You can edit your profile and delete your own messages directly in the app. For anything else, email admin@cordia.ext.io. We respond within one month, and we do not charge for handling a request unless it is manifestly unfounded or excessive.
We may need to verify your identity before acting on a request. Some information cannot be recovered or disclosed because of end-to-end encryption — we will tell you when that is the case and why.
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live, where you work, or where the alleged infringement took place. You can also complain to us first — we would rather fix it.
Automated decisions
We do not make decisions about you that are based solely on automated processing and that produce legal effects or similarly significantly affect you, within the meaning of Article 22 GDPR. We do not build behavioural or advertising profiles.
Community moderators can switch on automated filters for their own server — for example blocked words, link and invite blocking, mention limits, caps limits, or duplicate-message detection. Those filters act on a single message as it is sent: if it trips a rule, it is rejected and the sender is told which rule applied. They do not restrict accounts and they do not make decisions about you as a person.
When a filter blocks a message, we store a short excerpt of that message and the rule that applied in an audit log, so the block can be reviewed and appealed. Account restrictions are applied by a human moderator or by us, and you can appeal them.
Security
Cordia uses hashed passwords, httpOnly session cookies, rate limiting, per-resource authorization, and path-safe uploads. Direct message keys stay on your device. No system is perfectly secure, so keep your password and recovery code private and use a trusted device.
If a personal data breach is likely to result in a high risk to your rights, we will notify you and the relevant supervisory authority as required by Articles 33 and 34 GDPR.
Children
Cordia is not intended for children. You must be at least 16 years old to use it, or 13 where the law of your country sets a lower age for information society services under Article 8 GDPR.
If you believe a child has created an account, contact us and we will close it and delete the associated data.
Changes to this policy
We may update this policy as Cordia changes. When we do, we will update the date at the top of this page and, for material changes, tell you in the app or by email before the change takes effect.
This policy is not a contract, so continuing to use Cordia does not by itself "accept" a new version. Where a change affects how we use data you have already given us, we will ask for your consent if we need it.
Contact and complaints
Questions, requests, or complaints about privacy: admin@cordia.ext.io.
Cordia is run by an individual, so we do not publish a private postal address. If you need an address to serve a formal notice, email admin@cordia.ext.io and we will provide one.
If you are not satisfied with our response, you can complain to your national data protection authority. A list of EU authorities is published by the European Data Protection Board at edpb.europa.eu.