Privacy Policy
Cordelette · The closed test community for Google Play developers
Overview
Cordelette ("the app") is a community app developed and published by Saturn Software. It helps Android developers meet Google Play's closed-testing requirement by testing each other's apps in groups of 16 called "camps". This policy explains what data the app processes, why, for how long, and what you can do about it.
Account Data
You sign in with your Google account. We receive your email address, name, profile photo and Google account identifier. Your display name is shown to the other members of your camps; your email address is never shown to other users.
Optionally you can add your country and the languages you speak so camps can match testers and feedback can be read.
Device Data
We store your device model, Android version, app version, language and time zone, a push notification token, and a one-way hash of the device. The hash lets us enforce one account per device and prevent abuse; it cannot be turned back into a device identifier.
When device verification is enabled, the app requests a Google Play Integrity verdict so that emulators and modified devices can be excluded from camps.
Testing Proofs
To confirm that you really installed and tested the apps in your camp, Cordelette checks — only for the apps in your camps — whether they are installed and, if you grant Usage Access, how long each of them was in the foreground (Android usage statistics). The app does not look at, collect or send information about any other app on your device.
The results (installed or not, tested or not, seconds of use, version) are sent to our servers as proofs and are used to compute each camp's daily coverage and your Trust score.
Community Content
Chat messages (one-to-one, within a camp only) are stored with the camp and deleted when the camp reaches the summit. If a message is reported, a copy is kept as evidence until the report is closed and for 30 more days.
Feedback you leave on an app, including device model, Android version, app version, country and climb day, is shown to that app's owner and kept until 30 days after the camp's summit.
Support tickets are kept for 12 months after they are closed. If you choose to attach the latest error log to a bug report, it contains only technical events (error codes and the last crash trace of this app), never personal content.
Images you attach to chats, feedback or support tickets are chosen with the Android photo picker (the app gets no access to your gallery), converted to WebP on your phone with location and all other metadata removed, and stored in Cloudflare R2. Only the people the content is meant for can view them, and they are deleted together with the message, feedback or ticket they belong to; a reported image is kept as evidence like the message.
Invite codes and invite records are kept to prevent abuse of invite rewards.
Trust Score and Sanctions
We compute a Trust score from your testing activity. Your score and its history are visible only to you. Sanctions (warnings, suspensions, freezes) are recorded together with their reason, which is always communicated to you, and can be appealed once through in-app support.
Test Dashboard and Summit Report
If you add an app, its owner view (the "Test Dashboard", and at the summit the "Summit Report") shows which testers in the camp tested it on which day, their verified minutes of use, aggregated country / device / Android version diversity and the feedback received, so you can complete Google Play's production access form.
Cordelette Pass and Support Purchases
Cordelette Pass is a small companion app available to members of the Cordelette testers group. When it is installed, Cordelette checks once that it came from Google Play and records the date on your account; after that the Pass can be removed.
If you buy an optional coffee, we store the order number, the number of cups, the date and the verification result, and confirm the purchase with Google Play (the purchase token is kept only until Google confirms it). Verified cups show as a supporter badge on your profile card, visible to other members. Purchase records are kept for accounting and refunds.
We also note on your account when the app showed you the invitation to rate it or the coffee screen, and whether you tapped it, so that we do not ask too often. Your rating and review themselves stay with Google Play; we never see them through the app.
Service Providers
Cloudflare hosts our servers, database and image storage. Google provides sign-in, Firebase Cloud Messaging (push notifications), Play Integrity (device verification) and, for optional support purchases, Google Play Billing. Each acts under its own privacy terms.
Saturn Software does not sell your data, does not show advertising and does not use third-party analytics SDKs in the app.
Deleting Your Account
You can delete your account at any time in the app (Profile → Delete my account) or by following the steps at https://saturnsoftware.store/app/cordelette/delete-account/. Deletion removes your profile, apps, camp memberships (you leave active camps without a penalty), chats, feedback, support tickets, Trust history and invite code, and replaces your name with "Deleted climber" in camp screens and Test Dashboards.
To prevent abuse, we keep the one-way device hash (a new account on the same device cannot earn invite rewards, and existing sanctions carry over), evidence attached to open reports until they are closed (+30 days), and sanction and invite records under a pseudonymous identifier.
Children's Privacy
Cordelette is intended for adult Android developers and testers. It is not directed at children and must not be used by anyone under 16.
Your Rights
Depending on where you live, you may have the right to access, correct or delete your personal data, or to object to or restrict its processing. Write to support@saturnsoftware.store and we will respond.
Changes and Contact
We will update this policy when the app changes and show the date of the latest version. Questions: support@saturnsoftware.store.