Privacy Notice

Last updated: 9 August 2026

Cofinda is operated by Darren Hogan, trading as Cofinda.

This Privacy Notice explains what personal information Cofinda collects when you use the Cofinda pilot, why we collect it, how we use it, who we share it with, how long we keep it, and the rights you have over it. Darren Hogan, trading as Cofinda, is the data controller for the personal information described here.

1. Information we collect

We collect the following categories of personal information:

Account information. Your email address and an encrypted representation of your password, created when you register. Passwords are handled by our authentication provider and are never visible to us in readable form.
Profile information. Your chosen display name, your minimum trade size preference, your confirmation that you are 18 or over, your acceptance of the Cofinda Pilot Terms (including the date and version accepted), and a trust score derived from how reliably your trades are completed.
Delivery information. The recipient name, address lines, town or city, county or region, postcode and country you provide so that swapped stickers can be posted to you.
Collection information. The stickers you record as owned, the quantities you hold, and any bulk updates you import.
Trade information. Proposals you send and receive, acceptances, declines, dispatch confirmations, receipt verifications (including reports of missing, incorrect or damaged stickers) and the resulting trade history.
Technical information. Basic information generated automatically when you use the service, such as log and error data, and information needed to keep your session signed in and the service secure.

We do not ask for, and you should not send us, special category personal information such as health, biometric or political data. Cofinda is not intended for children and you must be 18 or over to register.

2. How we use your information

To create and maintain your account and keep you signed in.
To store your sticker collection and show your progress through the album.
To identify reciprocal swap matches with other collectors and to let you propose, accept, decline, dispatch and verify trades.
To show a trading counterparty the delivery address they need in order to post stickers to you once a trade has been accepted.
To calculate and display trust scores and completed trade counts so collectors can judge reliability.
To record that you are 18 or over and that you accepted a specific version of the Cofinda Pilot Terms.
To operate, secure, debug and improve the pilot, including investigating misuse and suspending accounts where necessary.
To contact you about your account, your trades or important service changes.

3. Our lawful bases

Contract. Most processing is necessary to provide the service you have asked for under the Cofinda Pilot Terms — creating your account, storing your collection, matching swaps, exchanging delivery details for accepted trades, and recording acceptance of the Pilot Terms.
Legitimate interests. We rely on our legitimate interests to keep the pilot secure, prevent abuse, maintain trust and trade history, fix faults, improve the service, and keep appropriate records of account and terms activity. We balance these interests against your rights and freedoms.
Legal obligation. We may process personal information where necessary to comply with a legal obligation or respond to a lawful request.

4. Information other collectors can see

Other collectors using Cofinda can see your display name, your trust score, your completed trade count, and the stickers involved in a match or trade with them. Your email address is never shown to other collectors.

Your delivery address is shared only with the specific collector you are trading with, and only after a trade between you has been accepted, so that stickers can be posted. You must use another collector's address solely to post their stickers for that trade and for no other purpose.

5. Service providers and international transfers

We use a small number of trusted providers to run Cofinda, including a hosting and application platform, a managed database and authentication provider, and email delivery for account messages. They process personal information on our instructions under contract and may not use it for their own purposes.

Some providers may process data outside the United Kingdom or the European Economic Area. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses with the UK International Data Transfer Addendum.

We do not sell your personal information and we do not use it for third-party advertising.

6. How long we keep it

We keep your account, profile, collection and trade information for as long as your account is open and for as long afterwards as reasonably necessary for the purposes described in this notice.

If you ask us to delete your account, we will delete or anonymise personal information where reasonably possible, subject to limited information we may need to retain for legal, security, fraud-prevention or unresolved trade purposes. We will not keep that information for longer than reasonably necessary.

Because Cofinda is a pilot, the service may be withdrawn. If that happens, we will provide reasonable notice where practical and will delete or anonymise pilot personal information when it is no longer reasonably necessary to retain it.

7. Security

Access to personal information is restricted by database row-level security so that you can normally only read your own account, profile and delivery details, plus the limited counterparty information needed for an accepted trade. Data is encrypted in transit, passwords are stored only in hashed form, and administrative access is limited to the operator for support, safety and moderation purposes. No online service can be completely secure, so please use a strong, unique password.

8. Your rights

Under UK data protection law you have the right to access a copy of your personal information; to have inaccurate information corrected; to have your information erased in certain circumstances; to restrict or object to processing, including processing based on legitimate interests; to data portability; and to withdraw consent where we rely on it. You can exercise many of these rights directly in the app by editing your profile and delivery details.

To make a request, email cofinda@fracta.studio. We will respond within one month. If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk.

9. Cookies and local storage

Cofinda uses only the storage strictly necessary to run the service — principally to keep you signed in and to remember a pending Pilot Terms acceptance until your first successful sign-in. We do not use advertising or third-party tracking cookies.

10. Changes to this notice

We may update this Privacy Notice as the pilot develops. The date at the top shows when it last changed, and we will tell you about significant changes through the app or by email.