Cosmas

Your data

Privacy

What Cosmas keeps where, and what it sends to whom. In short: local first, private until you share. Last updated 6 Nov 2026.

On your PC

The desktop app keeps everything in a data folder on your PC: %LOCALAPPDATA%\Kronikar (the catalogue catalog.db, settings, thumbnails, attachments, transcripts and downloaded AI models). It works offline.

  • Your video files stay where they are and are never uploaded.
  • Medal’s own database is only read, never written. Deleting a video in Cosmas moves the file to the Recycle Bin.
  • Discord bot tokens, AI keys and player contacts never leave your PC. Keys are stored encrypted in Windows Credential Manager.

On the web

Only when you sign in with Discord and sync, your chronicle goes to the Cosmas server at gingygames.com (Cloudflare): characters, factions, places, players’ names, events, journal entries, moments, images you attached, video titles and YouTube links. For a local video only its title, length and path inside your recordings folder are sent.

  • Everything on the web is private until you share it: Only me, Anyone with the link or Public, per record.
  • Published records show your Discord name as the author. You can unpublish or delete them at any time; a deleted public record disappears from the chronicle straight away.
  • Records marked as test data never sync and are never published.
  • Pigeon post (letters) syncs only if you tick it and is never published.

Sign-in

Sign-in uses your Discord account through the gingygames.com community site. Cosmas gets your Discord ID, name and avatar, never your password. The desktop app signs in through your browser and gets a personal token you can revoke at any time in the app or on the web (Settings → Sync).

AI providers

AI is optional and off until you choose where it runs.

  • On this PC (Whisper, Ollama and the bundled face and appearance models): nothing leaves your computer.
  • Paid service (Groq, Anthropic, Google, OpenAI, OpenRouter): only the audio of the track being transcribed, or the frames and transcript text being processed, go to the service you picked, under your own account with them. Their privacy terms apply to that data.
  • Cosmas itself never sends your recordings or transcripts to the Cosmas server for AI.

Update checks

The desktop app asks cosmas.gingygames.com/api/latest whether a new version exists. That request carries no account data; like any web request it includes your IP address, which Cloudflare processes to deliver it. Installers are downloaded from GitHub.

Feedback and bug reports

When you send feedback we store what you wrote, the kind (bug, idea, question), the app name, version, system and language, your browser’s user agent, the page or view you were on and, if you add them, your e-mail, a screenshot and the app log. If you are signed in, your Discord ID and name are attached.

  • It is visible only to the moderators of the CZ/SK roleplay community and the developer. A short summary (without the e-mail, the log or the screenshot) is posted to a private moderator channel on Discord.
  • Screenshots are stored privately and are never public. Check them for personal details before you send them; the app log may contain folder paths.
  • To limit abuse, the number of reports per person is limited; for that we keep a hash of your IP address for ten minutes.
  • Ask on Discord or in another report if you want your feedback deleted.

This website

This site sets one cookie, kr_lang, only when you switch the language. It uses no analytics, no ads and no third-party trackers. Pages are served by Cloudflare, which keeps short technical logs.

Deleting your data

Delete any record in the app; it disappears from the web on the next sync. Uninstalling the desktop app asks whether to delete the catalogue too. To have your whole web chronicle erased, ask the moderators on the community Discord.