Privacy Policy

Last updated: April 2026

Codorra ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, with whom we share it, and the rights you have over it. It applies to all users of the Codorra website and services at codorra.com.

By using the Platform you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal information is Codorra. If you have questions about this policy or wish to exercise your rights, please contact us through your account dashboard or via the contact details provided at the end of this policy.

2. Information We Collect

2.1 Information You Provide

Account information: name, email address, username, password (hashed), and profile details you choose to provide.
Author information: payout details (bank account or PayPal), tax identification information where required, portfolio links, and bio.
Payment information: when you make a purchase, payment details are collected directly by our payment processor. We do not store your full card number or bank details.
Communications: messages you send to us via support channels, dispute resolution requests, and feedback.
User-generated content: item descriptions, comments, reviews, and any other content you submit to the Platform.

2.2 Information Collected Automatically

Usage data: pages visited, items viewed, search queries, download history, and purchase history.
Device & technical data: IP address, browser type and version, operating system, device identifiers, referring URL, and time zone.
Cookies & similar technologies: see Section 8 for details.

2.3 Information from Third Parties

If you register or log in using a third-party service (e.g. Google or GitHub), we receive basic profile information from that service in accordance with your settings there.
Payment processors may share transaction status and fraud-prevention signals with us.

3. How We Use Your Information

We use your personal information to:

Create and manage your account and authenticate you when you log in.
Process purchases, facilitate payouts to Authors, and handle refunds.
Provide customer support and resolve disputes.
Send transactional emails such as order confirmations, payout notifications, and security alerts.
Send marketing communications and product updates where you have opted in (you may opt out at any time).
Personalise your experience and surface relevant items and recommendations.
Monitor and improve the Platform, detect fraud, and enforce our Terms and Conditions.
Comply with legal obligations, including tax reporting and anti-money-laundering requirements.
Conduct analytics to understand how the Platform is used and to improve our services.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

Contract performance: processing necessary to fulfil your account registration, purchases, and payouts.
Legitimate interests: fraud prevention, platform security, analytics, and improving our services.
Legal obligation: tax reporting, anti-money-laundering compliance, and responding to lawful requests.
Consent: marketing communications and non-essential cookies (you may withdraw consent at any time).

5. How We Share Your Information

We do not sell your personal information. We may share it with:

Payment processors: to handle transactions securely (e.g. Stripe). They process data under their own privacy policies.
Cloud infrastructure & hosting providers: to store data and run the Platform.
Analytics providers: to understand Platform usage (data is aggregated or pseudonymised where possible).
Email service providers: to send transactional and marketing emails.
Legal & regulatory authorities: where required by law, court order, or to protect the rights and safety of Codorra or others.
Business transfers: if Codorra is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

Public profile information (username, author bio, published items) is visible to all visitors of the Platform.

6. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home country. Where we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant data protection authority.

7. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide our services. We may retain certain information for longer periods where required by law (e.g. tax records for up to 7 years) or for legitimate business purposes such as fraud prevention. When data is no longer needed, we securely delete or anonymise it.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Platform. The types of cookies we use include:

Strictly necessary cookies: required for the Platform to function (e.g. session management, authentication). These cannot be disabled.
Functional cookies: remember your preferences such as language and display settings.
Analytics cookies: help us understand how visitors interact with the Platform (e.g. pages visited, time on site). These are anonymised where possible.
Marketing cookies: used to deliver relevant advertisements and track campaign performance. These are only set with your consent.

You can manage your cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect the functionality of the Platform.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
Restriction: ask us to restrict the processing of your data in certain circumstances.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interests or for direct marketing.
Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us through your account dashboard. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. Account Deletion

You may request deletion of your account at any time through your account settings or by contacting us. Upon deletion, we will remove or anonymise your personal data, except where retention is required by law or necessary to resolve outstanding disputes or enforce our agreements.

11. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), hashed password storage, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

The Platform is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

13. Third-Party Links

The Platform may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the Platform before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us through your account dashboard. We will do our best to address your request promptly.