Privacy Policy

Information we collect and why

Account and authentication data. If you create an account, Amazon Cognito processes your email address, account identifier, email-verification status, and authentication records. Octivary stores the private saved content, decision templates, and contributor-terms acceptance you choose to save. We do not store account passwords in Octivary databases. We use this information to provide account and saved features, maintain security, and prevent misuse.

Newsletter data. If you subscribe, we collect your first name, email address, consent wording and version, consent date and source, and subscription, unsubscribe, bounce, or complaint actions. We use it to send the newsletter, manage your subscription, and maintain unsubscribe evidence. You may withdraw email consent using the unsubscribe link in an email or by contacting us.

Google advertising and your choices

We use Google AdSense on a limited set of non-sensitive product guides. Google and its partners may use cookies, device identifiers, IP address, browser information, and similar technologies to serve and measure ads, limit fraud, and, where permitted, personalize advertising. Google may receive and process this information as an independent controller under its own policies.

Google Privacy & messaging provides the advertising consent choices for visitors in the EEA, United Kingdom, Switzerland, and applicable United States jurisdictions. Its first layer offers consent, refusal, and options management where required. You can revisit or withdraw advertising choices through Google’s privacy message or revocation control when it is available. Our Site settings dialog does not control advertising consent.

To understand how Google uses information from sites that use its services, read How Google uses data when you use our partners’ sites or apps.

Cloudflare Web Analytics

Octivary uses Cloudflare Web Analytics for cookie-free, aggregate traffic and performance measurement. It records limited technical and usage information, such as page views, referrers, browser and device details, and performance metrics, so we can understand and improve the public site. We do not use it for advertising, account analytics, visitor profiles, or custom tracking events. It does not receive account data, private decision-template contents, health information, free-form text, email addresses, authentication tokens, or precise location.

Cloudflare Web Analytics is not controlled by Site settings because it does not use analytics cookies. Site settings controls only optional first-party display preferences.

Cookies, identifiers, and sharing

Necessary cookies support security, authentication, core site features, and remembering your Site settings choice. Third parties may place or read cookies, use device identifiers or web beacons, and receive IP address or browser information when they provide advertising or analytics services. We share only the information needed for those services and do not sell account credentials, private saved content, or health information.

We use Amazon Web Services (AWS) to host and operate Octivary; Amazon Cognito for account identity and authentication; Amazon Simple Email Service (SES) for newsletters; Cloudflare for cookie-free aggregate site analytics; and Google for the advertising services described above. These providers may process information in the United States and other countries where they or their subprocessors operate. AWS describes its commitments in its GDPR Center.

Retention

We retain account and saved-content records while your account is active and delete them following a verified deletion request, ordinarily within 30 days, except where longer retention is required to establish, exercise, or defend legal claims. Newsletter records are kept while you remain subscribed; consent, unsubscribe, bounce, and complaint evidence is retained for three years after unsubscribing or suppression. Optional aggregate analytics are retained for up to 395 days. Provider retention for Google and Cloudflare is governed by their own policies and settings.

Your privacy rights and requests

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. You may also have the right to complain to your local privacy regulator. Advertising choices can be managed through Google’s native privacy message; newsletter consent can be withdrawn through an email unsubscribe link.

To make a request, use our contact page and state the right you want to exercise, the email address associated with your account or subscription, and enough detail to locate the relevant data. We may ask for reasonable information to verify identity and authority before acting.

Security, children, and changes

We use reasonable technical and organizational measures designed to protect information, including access controls and managed cloud services. No internet service can guarantee absolute security. Octivary does not knowingly collect personal information from anyone under 18. If we learn that we collected personal information from someone under 18, we will delete it promptly.

We may update this policy when our practices or legal obligations change. We will post the updated policy here, revise the effective date, and provide additional notice when required.

Contact

For privacy questions or requests, email support@cozycabinops.com or use the contact page. CozyCabinOps is the operator of Octivary.

Effective date: August 16, 2026