Privacy

Who we are

Cosy Paws is run by an individual based in the United Kingdom, who is the “data controller” for the information below. You can reach us at hello@cosypaws.example.

What we collect, and why

• Your uploads and artwork: the pet photo you upload, the area you crop, your pet’s name if you give it, and the portrait we create. We need these to draw your pet and print your order. We only use your photo to make the art. Pet photos are often taken at home, so we never use them for anything else and never show them publicly. If a person appears in the photo, they are left out of the portrait.
• Your email and delivery details: collected at checkout so we can send your order, confirmation and tracking.
• A browser ID and a scrambled (hashed) IP address: used only to count your free tries and stop abuse. We never store your IP address in readable form.
• Sign-in details (if you choose to sign in with Google, Facebook or Apple): your name and email, so you can see your orders and use extra tries from a Treat Pack.
• If you apply to be an affiliate: the information you give us when applying (such as your social media handles and audience size), your code, your payout email, and the sales and earnings linked to your code. We use it to review your application, run the programme and pay you. It’s kept securely, seen only by us, and never shown to customers or other affiliates. Affiliates never see customers’ names or details.
• A saved discount code: if you arrive through an affiliate’s link, the code is remembered in your browser for 30 days so it can be added at checkout. It’s stored only on your device.

We process this to provide the service you asked for (our contract with you) and, for abuse prevention, because of our legitimate interest in keeping the free tries fair.

Who helps us

We share data only with the services that make Cosy Paws work:

• OpenAI: draws the portrait from your photo and checks photos and text for harmful content.
• Stripe: takes payments. We never see your full card details.
• Printify and its print partners: print and ship your item (they receive your artwork and delivery address).
• Base44: hosts the website, database and files.
• Cloudflare Turnstile: checks you’re a human before uploads.

Some of these providers are outside the UK. Where they are, they use legally recognised safeguards for international transfers.

How long we keep it

• Photos you upload and portraits you don’t buy: kept for up to 12 months, so you can come back and order your pet’s portrait later.
• Portraits you buy (including the print-ready files): kept for up to 2 years, so we can handle reprints, misprint claims and repeat orders.
• Order and payment records (your name, delivery address, what you bought and what you paid, but no images): kept for 6 years, because UK tax law requires us to keep business records.
• The browser ID and scrambled IP address used for free tries: kept for up to 12 months after your last visit.
• Affiliate records (application, sales and payouts): kept while you’re an affiliate and for 6 years after the last payout, for tax records. Declined applications are deleted after 12 months.

After these periods we delete the data. You can ask us to delete your photos and portraits sooner at any time (see “Your rights” below), unless we still need them for an order that is in progress.

Cookies

We use no analytics, advertising or tracking cookies. We only store what the site needs to work, such as the browser ID that counts your free tries and your sign-in session. That’s why there’s no cookie banner.

Your rights

You can ask us to see, correct or delete your data at any time. Email hello@cosypaws.example and we’ll reply within one month. If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk).

Questions? Visit our Contact page.