Privacy Policy — Cocoleech
This Privacy Policy explains how Cocoleech (“we”, “us”, “our”) handles your information when you use our website and services. We are located in the United Kingdom and process personal data in accordance with UK data protection law (UK GDPR & Data Protection Act 2018).
Last updated: 4 Oct 2025
1. Scope
Cocoleech acts solely as a gateway between you and third-party file hosts. We do not host, store, index, mirror, cache, or share files or links—our system is not designed to do so. This Policy covers personal data processed when you browse our site, create an account, make a one-time purchase, or initiate a host request.
2. Data We Collect (Minimal)
We operate on a strict data-minimization approach. We do not keep activity logs. Specifically, we do not retain IP addresses, user agents, browsing history, or request logs beyond what is technically necessary to deliver a specific action in the moment.
- Account/Contact: Your email address (for sign-in, receipts, and support).
- Host Request Metadata (Minimal): The target file host identifier you choose (e.g., which host to use). We do not retain the original file URL or file contents.
- Payments: One-time payments are handled by our payment processors. We receive confirmation (amount, currency, status) and anonymized references; we do not store full card details.
- Support: Messages you send to [email protected] (and any attachments you voluntarily provide).
Any transient technical signals required to complete a request are processed ephemerally and are not stored as persistent logs.
3. How We Use Data (UK GDPR Legal Bases)
- Provide the Service: Use your email for account access/support and use the selected host identifier to perform the requested action. Basis: contract performance.
- Process one-time payments: Coordinate with processors to complete purchases and deliver features. Basis: contract performance.
- Communicate with you: Support responses and important notices. Basis: contract performance or legitimate interests.
- Compliance: Meet legal obligations (e.g., accounting/tax records from payment processors). Basis: legal obligation.
6. International Transfers
Data may be processed outside the UK/EEA by vetted providers. We implement appropriate safeguards (e.g., UK IDTAs or other approved mechanisms) to maintain UK-equivalent protection.
7. Data Retention
- Email address: retained while your account is active and for a limited period after closure (for queries, receipts, and legal record-keeping).
- Target host identifier: processed ephemerally to fulfill your request and not retained as a persistent log.
- Payment records: retained by us and/or our processors as required for accounting, tax, and fraud-prevention obligations.
8. Security
- We implement appropriate technical and organizational measures.
- No method is 100% secure; safeguard your credentials and devices.
9. Children’s Privacy
The Service is for adults. If you believe a minor has provided personal data, contact [email protected].
10. Your Rights (UK GDPR)
Subject to conditions and exemptions, you may have the right to:
- Access the data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase data (where applicable).
- Restrict or object to certain processing.
- Port data you provided, where technically feasible.
- Withdraw consent where processing relies on consent.
To exercise rights, email [email protected]. We may verify your identity and will respond within legal timeframes.
11. Complaints
Please contact us first and we’ll try to resolve your concern.
12. Changes to This Policy
We may update this Policy periodically. Material changes will be announced by updating the date above and, where appropriate, via on-site notice or email. Continued use of the Service means you accept the updated Policy.
13. Contact Us
- Email: [email protected]
- Company: Cocoleech — United Kingdom
