What this version stores
Cosmetifys has an editorial website, a newsletter signup and a store account area. Newsletter membership and customer registration are separate choices.
Email membership
If you subscribe, we store your email, optional name, subscription status, signup source, consent wording version and consent time. We use a clear single opt-in checkbox. This version does not verify email ownership or automatically send a welcome message or bulk campaigns.
The administrator can export subscribed contacts for use with an email delivery provider and can record unsubscribe requests. A secure unsubscribe link is available for each member and must be included in messages. If an external provider is used, the operator must also keep its suppression and unsubscribe records synchronized.
Customer accounts and orders
Creating a store account stores your name, email, password hash and account timestamps. We do not store your password in plain text. Baskets, order items, order status, prices, delivery details and store-credit records are stored on the website server in its database.
An order asks for a delivery name, address, city, country, postal code and optional phone number. These details are visible to the customer and authorized store administrators. Customer accounts are not automatically subscribed to marketing emails.
Wallet and manual payment references
The wallet records internal store credit. Top-up requests may store an amount, payment reference and review status. Only a verified manual approval can credit a wallet. This version does not collect card numbers, bank passwords or online banking credentials.
Session and security records
A necessary session cookie keeps login and form state. Rate limits use keyed hashes of technical request information, such as the remote IP address and login identifier, instead of storing that IP in the application’s rate-limit table. Administrator actions and wallet movements are logged. Hosting services may separately keep ordinary access and error logs.
Browser-only tools
The ritual finder, ingredient search and product search run in the browser. A local preference called cosmetifys-notice remembers whether the storage notice was dismissed. There are no advertising trackers or analytics scripts in this version.
Contact and hosting
The contact form prepares an email in your own email application; it does not submit the message to the website server. Website files and database records are hosted by the site operator’s chosen provider. Access to database backups must be limited to authorized people.
Your choices
Use the unsubscribe link in a message or contact the owner to stop newsletter emails. Contact us for questions about access, corrections or deletion. Some order and transaction information may need to be retained for legitimate operational or record-keeping reasons. The operator should publish its legal identity, contact details and actual retention periods before live trading.
Questions
See the contact page. Please avoid including unnecessary sensitive information.