Privacy at Cozzette

Your email address, the password you chose (only ever as an Argon2id hash — we cannot read it, and neither can anyone who steals the database), your country and city, your preferred size and the measurements you give us so the next piece fits like the last one, and whether you want to hear about new pieces.

Of your birthday we keep the day and month — never the year — for the birthday discount. The only exception is an account for someone under sixteen: there we keep the date they turn sixteen, so the account can grow up on its own, and delete it the day it passes.

We also keep the last twenty pieces you looked at while signed in (for your dashboard), what is on your wishlist and in your bag, and any review, rating or idea you send us. Only your first name is ever shown beside a review.

If you order, we also store the shipping address you gave, what you bought, and the fact that a payment succeeded. We never store your card number: those fields belong to Paystack or Stripe and are rendered inside their frame, so the number never reaches our page or our servers.

Shipping addresses, phone numbers, your measurements, guardian email addresses, the email a visitor leaves with a message, and any AI key you connect are encrypted at rest with AES-256-GCM, each with its own random initialisation vector and an authentication tag. Someone who obtained a copy of the database would still not have those fields.

Passwords, sign-in sessions, email links and the keys and tokens you give AI assistants are stored only as one-way fingerprints (hashes), so they cannot be read back by anyone, including us.

Everything else — what you bought, when, what you saved — is stored in plain columns, because pretending otherwise would be theatre.

You can make an account, save pieces and play the outfit game immediately. What we do not do is store a street address on your account, or the year you were born. Your account holds your country and city, so we can show prices in your currency.

To place an order, a parent or guardian confirms by clicking a link we email them. Not a tickbox — a link they actually click, from an address they actually control. Until that happens nothing ships and no address is recorded anywhere. The shipping address is attached to the order by the guardian at checkout, not to your profile.

A guardian can ask us to delete the whole account at any time, and we do it the same working day.

We use Google Analytics 4 with IP anonymisation switched on, to see which pages people actually reach. We do not run advertising pixels, we do not sell anything to data brokers, and we do not attempt to identify you across other websites.

The measurement ID is public by design — you can read it in this page’s source. If you block analytics, the site works exactly the same.

Both are part of Premium; on a free account nothing is sent to an AI service. When a Premium member photographs a garment for the stylist, the photograph is sent to Anthropic’s API — or, if you connected your own ChatGPT, Gemini or Claude key, to that service — to make the suggestions, and it is not stored by us. We keep a count of how many scans you have used that day, to enforce the daily limit. We do not use your photographs to train anything.

The helper is told the shop’s policies, the catalogue and your own orders (reference, stage and total) so it can answer questions about them — nothing else about you. The conversation lives in your browser tab and is not saved. Reviews are read by an AI before a person decides anything it is unsure about.

If you connect ChatGPT, Claude, Gemini, Olympia or another assistant to your account, it can do only what you ticked when you connected it — for example see your orders or build your bag — and it never receives your email address, password, birthday, a delivery address or anything about a guardian. You can disconnect it at any moment from your settings. What the assistant’s own company does with your conversation is governed by its own privacy policy.

Cozzette’s own team also uses an assistant, Orbis, to help run the shop. It can do what a member of staff can, and every action it takes is recorded in the same audit log as ours.

To show a visitor prices in naira, cedis or dollars, we read the country your connection comes from, as our hosting provider reports it. It is used for that page and not stored.

One cookie, for your session, so the site knows you are signed in. It is HttpOnly, Secure and SameSite=Strict, which means JavaScript cannot read it, it never travels over plain HTTP, and it is not sent when another site links to us. There are no tracking cookies.

Email hello@cozzette.org from the address on the account and ask. You can have a copy of everything we hold, or have all of it deleted. Every message gets a reply within one working day.

Deletion means deletion. Orders already dispatched keep a record of the transaction because we are legally required to, but the personal fields on them are erased.

Cozzette is an online shop with no public premises, which is why there is no address or map anywhere on this site. If we ever open one, this page and the footer will say so on the same day.