Privacy Policy

Cozy Window is operated by Ahmet Servet Polat in Türkiye. This policy explains what happens to information when you make, share, or view a room, create an account, or buy Premium. For privacy questions or requests, email [email protected].

What we collect and why

• Rooms: We store the title, note, chosen items and colors, room links, and creation and update times so we can save, publish, and display your room. A note may contain personal information if you put it there.
• Accounts: Clerk handles sign-in and account information. We use your Clerk user ID to connect your rooms and Premium access to your account.
• Payments: Polar handles checkout and payment details. We receive checkout and order identifiers, payment status, and refund events to activate or remove Premium. We do not store your card number.
• Session and network data: An essential cozy_room_session cookie lets you return to an anonymous room in the same browser. It lasts up to 30 days and is renewed when you save or publish. Clerk uses cookies for sign-in, and Polar may use cookies during checkout. We use a hashed network address for a daily room creation limit. When you start checkout, we may send your IP address to Polar so it can choose a local price.

We collect this information through the room editor, account and checkout flows, cookies, and request headers. We use it to provide the service, process purchases, protect it from abuse, and meet legal obligations. Depending on your location, the legal grounds include performing our agreement with you, our legitimate interest in service security, and compliance with legal obligations. We have not added product analytics or advertising trackers.

Who can see it

Anyone with a published room link can view its title, room, and note, and can pass the link on. Do not put information in a note that you or someone else would not want shared. Drafts are only available through your account or anonymous browser session.

We use Clerk for accounts, Convex for room and entitlement data, and Polar for checkout and payment. These providers process the information needed for their services and may process it outside Türkiye or your country. Polar is the merchant of record for purchases and applies its own privacy policy to checkout data. We may also disclose information when required by law.

How long we keep it

Unpublished drafts are scheduled for deletion seven days after the last edit. An expired free room closes after 24 hours from first publication and is scheduled for deletion seven days later, unless you upgrade in time. Cleanup runs daily, so deletion may follow the deadline. Published Premium rooms have no set expiry while Premium remains active; you can delete them, and a full refund may close them. We keep account, session, and purchase records as needed to operate entitlements, handle requests, and meet legal obligations. The hashed network limit is scheduled to expire after one day.

Your choices and rights

You can edit an active room and delete drafts or eligible Premium rooms in the editor. You can request access to, correction of, or deletion of your personal information, or object to or restrict certain processing, where applicable. You may also have rights to a copy of your data and to complain to a data protection authority. Email us at [email protected]; we may need to verify that the account or room is yours before acting. Deleting your browser cookie removes access to an anonymous room from that browser, but does not itself delete the room from our systems.

Changes

We may update this policy as the service changes. The date above shows the latest version.