Help & legal
Written to be specific rather than reassuring. Collabea is a demonstration deployment, but if you create an account the data below is really collected and really stored.
Version 12 October 2026
No ads, no analytics, nothing sold
Nothing you do here is tracked across other sites. Error monitoring is the one exception, and it exists to fix faults.
Secrets stay unreadable
Passwords are stored only as a bcrypt hash. Social access tokens are encrypted and never sent back to the browser.
Uploads have public links
Files are served from long, unguessable URLs that do not expire. Anyone holding a link can open the file.
Sessions end on their own
After 30 days without activity, and 90 days after you signed in at most.
You can delete your account
From Settings, with your password, once none of your contracts is still unsettled.
| What | Why |
|---|---|
| Email address and name | Your account, signing in, and the email we send you. |
| Phone number | Only if you choose to add one. |
| Password | Signing you in. Stored only as a bcrypt hash: we cannot read it, and neither can anyone who reads the database. |
| IP address and browser user-agent | Recorded against each session so you can see and revoke your own signed-in devices from Settings. |
| Profile content | Bio, location, niches, rate cards and portfolio, shown on your profile. |
| Jobs, proposals, contracts, milestones and reviews | The work you create with other people, and the record of it. |
| Messages and attachments | Delivering your conversations. |
| Scheduled posts, Studio runs and reference media | Only if you use the Scheduler or the Studio. |
| Connected social accounts | Only if you link one. See section 4. |
Collabea is hosted outside your country and uses a small number of third-party services. Data reaches each of them only for the purpose named.
| Service | What it receives | Why |
|---|---|---|
| Hosting and database | Everything in section 1 | Commercial cloud infrastructure that runs the app and stores its data. |
| Email provider | Your address and the content of the message | Verification, password reset and notification email. |
| File storage | The files you upload | Third-party object storage that serves your uploads. |
| Error monitoring | Error reports, which can include your email address. A proportion of sessions may be recorded as a screen replay. | Finding and fixing faults. Text and media are masked in replays, but the pages you visited and the shape of what you did are not. |
There is no advertising and no analytics in the product, and nothing you do here is tracked across other sites or used to build a profile of you. The error monitoring above is the one exception, and it is there to fix faults rather than to study you. Nothing here is sold, and nothing is shared with anyone else.
| Cookie | Purpose | Lifetime |
|---|---|---|
cb_sid | Keeps you signed in. | Up to 400 days in your browser; the session behind it ends as in section 5 |
theme-mode | Remembers your light or dark theme. | One year |
site-auth | Remembers that you entered the site password, only when the site is password-gated. | 30 days |
That is all. There are no advertising or analytics cookies, which is why you are not being asked to consent to any.
If you connect Instagram, Facebook, YouTube, X or TikTok, we receive your public profile and audience metrics from that platform.
Anything else, including a copy of your data, by email: support@collabea.com.
Delete your account from Settings › Data management.
If you only want a break, deactivating hides your account instead, and signing back in restores it.
Collabea is for people aged 18 and over. We do not knowingly collect data from children.
If this policy changes materially, the version stamp at the top changes with it, and the version you agreed to is recorded against your account.
Questions: support@collabea.com. The rules for using Collabea are in the Terms of use.