Co-GM
Sign in

Privacy policy

Last updated October 27, 2026

Who we are

Co-GM is run by Rhyneer Consulting LLC. For anything about this policy or your data, email cogm@cogm.tech.

Signing in

You sign in to Co-GM with a Northlight account. Co-GM stores your Northlight user id, the name and picture from your Northlight profile, your email address and whether Northlight has verified it, the tokens that connect Co-GM to your Northlight account, and a record of each signed-in session.

What you create

Co-GM stores what you create in it: campaigns, notes, sessions, library items, images and your settings. Images are stored in Co-GM's private file storage at Cloudflare; everything else is stored in Co-GM's database. Anything you publish to the workshop is visible to other Co-GM users.

AI features

The setup assistant and the Co-GM command-line tool for agents run on your own Northlight runtime, under your Northlight subscription. When you use the setup assistant, Co-GM sends it your messages, your note types and tags, the names and descriptions of your library items and of the workshop items you can use, and your campaign's name, and keeps the conversation with your account. An agent you run on your Northlight runtime can read and change your Co-GM data with the command-line tool, within the permissions you give it, and Co-GM records which changes came from an agent.

Payments

Payments for Standard are handled by Stripe. Co-GM never sees your card number. It stores your Stripe customer id and the state of your subscription: its plan, billing interval, amount and the end of the current period.

Importing from cogm.tech

If you used the old cogm.tech, you can import its data into Co-GM. Co-GM finds your old account by the email address on your Northlight account. Where that is not enough, Co-GM emails a code to the old account's address through Resend, and you enter it to prove the account is yours. The import copies what the old account holds, including its campaigns, notes, images, library items, workshop items and plan.

Google Analytics and Google Ads

Google Analytics and Google Ads run on every page of Co-GM, including pages you see while signed in. They collect the pages you visit, the page titles (which can include the names of your campaigns and notes), your device and approximate location, and whether you signed up for Co-GM.

Visitors in the EU, the EEA, the UK and Switzerland are asked before these run. Anyone can change their choice with "Cookie settings" at the bottom of every public page.

Cookies

  • Session cookie (cogm_session): keeps you signed in, for up to 30 days.
  • Sign-in cookie (cogm_sign_in): set while you sign in with Northlight, for at most 10 minutes.
  • Consent cookie (cogm_consent): remembers whether you accepted or rejected Google's cookies, for 365 days.
  • Sign-up cookie (cogm_signup): set once, when you first sign in, and removed on the next page, after at most 10 minutes. It is used only to report the sign-up to Google.
  • Google's cookies: set by Google Analytics and Google Ads, as described above.

Exporting and deleting your data

You can download everything you have created in Co-GM from Settings, under "Export your data".

To have your account and everything in it deleted, email cogm@cogm.tech.