Privacy Policy

1. Who we are

CozyCorner ("we", "us") operates this website — a curated catalog of home goods with links to third-party retailers. For any privacy question or request, contact us via the contact details published on the Site.

2. What data we collect

• Newsletter email. Only if you submit it in the subscription form, and only to send you our newsletter. When you submit the form, Cloudflare Turnstile runs a background bot check to confirm you are human (see section 5).
• Your cookie choice. Whether you accepted or declined optional cookies — stored in your browser's local storage so we don't ask again.
• Technical logs. Our hosting provider processes standard server logs (IP address, browser type, requested pages) to deliver the Site securely.

We do not require accounts, do not process payments and do not run behavioural advertising on the Site.

3. How we use data and on what legal basis

• Operating and securing the Site — legitimate interest (GDPR Art. 6(1)(f)).
• Sending the newsletter you asked for — consent (GDPR Art. 6(1)(a)), which you can withdraw at any time by unsubscribing.
• Optional analytics — only with your prior consent given in the cookie banner; if you decline, no analytics run and nothing is collected.

4. Cookies and local storage

We use only what is strictly necessary for the Site to work, plus optional analytics that stay off unless you opt in:

• Consent record (essential). A local-storage entry remembering your cookie choice. Strictly necessary; it stores no personal data beyond the choice itself.
• Analytics (optional, off by default). Enabled only after you click "Accept" in the cookie banner. Currently the Site runs no analytics at all.
• Retailer cookies. When you click a product link you leave the Site; the retailer (e.g. Amazon) may set its own cookies, including ones that attribute your purchase to us as an affiliate. Those cookies are governed by the retailer's own privacy policy.

5. Who we share data with

• Vercel — hosting and content delivery (server logs).
• Supabase — our database and image storage infrastructure.
• Cloudflare — bot protection for our forms (Turnstile). When you submit the newsletter form, Turnstile silently verifies that you are human and may process technical signals from your browser for this purpose, as described in Cloudflare's Turnstile Privacy Addendum (https://www.cloudflare.com/application-services/terms/turnstile-privacy-policy-addendum/).
• Retailers (e.g. Amazon) — only in the sense that you visit their sites when you click a product link; we do not transmit your personal data to them.

We do not sell your personal data to anyone.

6. Data retention

Newsletter emails are kept until you unsubscribe. Your cookie choice stays in your own browser until you clear it. Hosting logs are retained for the short periods set by our hosting provider.

7. Your rights

Depending on where you live (including under the GDPR and similar laws), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted ("right to be forgotten");
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time (e.g. unsubscribe, change your cookie choice);
• lodge a complaint with your local data protection authority.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA.

8. Children

The Site is not directed at children under 16 and we do not knowingly collect their data.

9. International transfers

Our infrastructure providers may process data outside your country. In such cases they rely on recognised safeguards (such as EU Standard Contractual Clauses).

10. Changes to this policy

We may update this policy; the current version with its "last updated" date always lives on this page. Significant changes will be highlighted on the Site.

11. Contact

For any privacy request, use the contact details published on the Site. See also our Terms of Service.