Privacy policy

What CozyColor Studio does with your personal data, in plain words. Short version: without an account, everything stays in your own browser. We do not track…

Who we are

CozyColor Studio (thecozycolorstudio.com) is responsible for the personal data described here. Questions about your data or your rights: email info@thecozycolorstudio.com.

Using the site without an account

Your palettes, markers, projects, project photos, lesson progress, favorites and settings are saved in your own browser on your own device (browser storage). They are not sent to us.

You can make a backup file, restore it or delete everything yourself in Settings.

With a free account

• We keep your email address and, if you choose one, a display name. Your password is stored only as a secure hash, so nobody can read it.
• If you turn on sync, we also keep your palettes, markers and marker sets, projects (without photos: those stay on your device), lesson progress, favorites and a few small settings, so you can use them on your other devices.
• Purpose: providing your account and sync. Legal basis: the agreement with you (you asked for an account).
• Where: our database provider Supabase, in the EU (Frankfurt, Germany).
• You can download all account data (Account → Download my data) and delete your account at any time (Account → Delete account). Deleting removes your account and everything synced to it.

Emails

We only send account emails: confirming your email address, resetting your password, verification codes and security notices (for example when your password was changed). No newsletters and no marketing. These emails are sent through Resend, from its EU (Ireland) region.

When you email us at info@thecozycolorstudio.com, your message is kept in our mailbox, which is hosted by Google (Gmail), for as long as needed to help you.

Purchases

Checkout and delivery are handled by Payhip, and payment by PayPal. They process your email address and payment details under their own privacy policies. We never see your payment details.

From Payhip we receive the order number, the products, the amount, the currency, the date, whether a discount code was used and your email address. We do not store your email address itself: we keep only a one-way fingerprint (hash) of it, so a purchase can be added to an account with the same confirmed email address.

Purpose: delivering what you bought, showing it in My purchases, handling refunds, and our bookkeeping. Legal basis: the agreement with you and our legal obligation to keep financial records.

Retention: order records are kept for 7 years, as Dutch tax law requires. If you delete your account, these records stay, but they are no longer linked to you.

Withdrawal requests and messages

If you use the withdrawal form, we receive your name, email address, order details and your message, and we send you a confirmation. We keep this together with the order records (7 years).

Website and security

The site is delivered by Cloudflare. To deliver pages and to protect the site, Cloudflare processes technical data such as your IP address. Our own server logs contain no names, email addresses or IP addresses.

We do not use analytics, advertising or social media trackers.

Cookies and browser storage

We do not use cookies for tracking or advertising. The site only uses browser storage that is strictly needed: for your own app data (see above) and, when you sign in, to keep you signed in. That is why there is no cookie banner.

The Payhip and PayPal checkout pages are separate websites with their own cookies and policies.

Who helps us (processors)

Cloudflare

hosting of the website, domain and DNS, forwarding emails sent to our address

Supabase

accounts and sync (data stored in the EU, Frankfurt)

Resend

sending account emails (EU region, Ireland)

Google (Gmail)

our mailbox for emails to info@thecozycolorstudio.com

Payhip

checkout and delivery of downloads (under its own privacy policy)

PayPal

payment (under its own privacy policy)

Some of these companies are based outside the EU (for example in the United States or the United Kingdom). Where personal data is transferred outside the EU, this happens under the safeguards of the GDPR, such as an adequacy decision or standard contractual clauses.

Your rights

You have the right to access, correct, delete and receive your data, and to object to or limit its use. Many of these you can do yourself on the Account page; for anything else, email info@thecozycolorstudio.com. We reply within one month.

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

Changes

If we change this policy, we update the date at the top. Important changes are announced on the site.