Privacy notice

Scope and contact

This notice covers the MyCozySheets website and installed web app. For privacy questions or requests about your data, contact support@mycozysheets.com or use your signed-in Support inbox.

Information used to provide your workspace

We process your account email, authentication and profile information; the records you choose to save in Calendar and your tools; product access and purchase records; and support conversations and screenshots you submit. Team workspace information is available to authorised members of that workspace. Support requests are available to our support team.

We use this information to create and maintain your account, save your work, grant purchased access, process payments, respond to requests, and protect the service. These activities support our contract with you and our legitimate interests in operating and securing the service. Records needed for tax or other legal obligations are processed for those obligations.

Payments and service providers

Stripe processes web payments and billing information. Full card details are handled by Stripe, not stored in our application database. Etsy purchases are processed by Etsy; activating eligible web access uses the order information needed to verify your purchase. Supabase provides our authentication, database and private file storage, and Vercel hosts the web application. Operational email delivery, when enabled, uses our configured mail service.

These providers may process data in more than one country according to their service terms and data protection arrangements. Their own notices explain their processing: Stripe, Supabase, Vercel and Etsy.

Visit and campaign measurement

We measure selected page views, demo clicks, campaign codes, confirmed accounts and paid orders to understand how the service is used. Visit measurement uses a temporary identifier held in page memory. It does not set analytics cookies, retain full referring URLs or record IP addresses in our analytics tables. Hosting and security providers may process connection information as part of their services.

A campaign code may be associated with a newly confirmed account and its paid orders to measure conversions. We do not put your email or saved planning records into campaign reports. We retain measurement records for service reporting and review their continued need. You can contact Support to request access to or deletion of account-linked measurement data. We respect browser Do Not Track and Global Privacy Control signals for client-side visit and campaign tracking. These statistics are used to improve the service, not to make automated decisions about your eligibility or pricing.

Live activity counts

While a page or installed app is visible and recently used, it sends a temporary random session identifier, web/app mode and signed-in status to estimate current activity. This does not include your account ID, email, IP address, page URL or planning content. Signals stop while hidden or offline, or after five minutes without interaction. A session leaves the live count after 90 seconds without a signal. Temporary presence records are cleared during subsequent activity after 24 hours, independently of historical analytics. Do Not Track and Global Privacy Control opt-outs apply.

Cookies, local storage and drafts

Authentication uses the storage needed to keep you signed in. The installed app may cache interface files and save interface preferences. Unsent support and Calendar drafts can be kept in this browser tab, separated by account, with a 24-hour recovery limit. Shared-device users should sign out and close their tabs when finished.

Retention and your choices

Saved account and tool records are retained to provide your workspace. You can request a copy, correction or deletion of your personal data from Account settings. Deletion requests are reviewed with you, including active subscriptions, shared workspaces and records that must be retained for legal or accounting reasons. Deleting the installed app alone does not delete your online account or cancel billing.

Where applicable, you may also request restriction, object to processing based on legitimate interests, request portability, or complain to your data protection authority. We may need to verify your identity before disclosing or changing account data. Read more about data protection rights.