Last updated: July 29, 2026

This Privacy Policy explains what information CocoCloud - App Signing ("we", "us", "the Service") collects, how we use it, and the choices you have. By using the Service you agree to the practices described here.

Information We Collect

Account Information

• Basic profile details you provide when registering: first name, last name, username, email address, and optional avatar.
• If you link a Discord or Telegram account, we store the connection so we can sync community roles and let you sign in that way. We do not receive your Discord/Telegram password.
• If you enable two-factor authentication, we store the encrypted secret needed to verify your login codes.

Certificates and App Files

• Signing certificates (.p12), provisioning profiles (.mobileprovision), and .ipa/.tipa app files you upload in order to use the signing, re-signing, and certificate-management features.
• These files exist to provide the Service you requested. Signed output files and temporary working copies are automatically deleted from our servers on a short schedule (typically within around 15 minutes) once processing is complete.
• We never sell certificate or app file contents, and we do not use them for any purpose other than performing the signing/checking operation you asked for.

Usage and Log Data

• API request counts, rate-limit status, and basic abuse-prevention signals (e.g. if an API key is flagged for excessive or abusive use).
• Standard server logs such as IP address, browser/device type, and pages requested.

Cookies

• Session cookies required for you to stay logged in and for the Service to function.
• A preference cookie that remembers you've acknowledged our cookie notice.
• Cookies set by third-party services described below (analytics and advertising).

How We Use Information

• To provide, maintain, and improve app signing, certificate management, cloud storage, and related features.
• To enforce rate limits, plan limits, and prevent abuse of the API and signing infrastructure.
• To communicate with you about your account, support requests, or important changes to the Service.

Cookies, Analytics & Advertising

We use Google Analytics to understand how the Service is used in aggregate. We also show ads through Google AdSense to help keep the core signing service free. Google and its partners may use cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this and other websites. You can learn more about how Google uses data and manage your ad personalization settings at policies.google.com/technologies/partner-sites and adssettings.google.com.

Downloads and signing are always free and are never gated behind a required ad interaction. We separately offer an optional "hide ads" feature: if you'd rather not see ads for a short period, you can complete an offer through our ad-code partner to temporarily hide ads sitewide, as an alternative to a paid Pro subscription. This is entirely optional.

Third-Party Services

Certificate revocation checks are performed against Apple's own servers. Optional sign-in and community features integrate with Discord and Telegram under their respective privacy policies. WebDAV and any external server you configure yourself are outside our control once files are transferred there.

Data Retention & Deletion

You can request deletion of your account at any time from your account settings. Once requested, your account and associated personal data are scheduled for removal. Signed/working app files are deleted automatically on a short retention schedule regardless of account status.

Data Security

We use industry-standard measures (encrypted password storage, optional two-factor authentication, scoped API tokens) to protect your account and files. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact Us

Questions about this policy can be sent to [email protected].