What we collect, and why.
We collect as little as we can, and we don't sell any of it. Here's all of it.
What you give us on purpose
- When you reserve: your email and/or phone, optionally your name, which product you're interested in, and whether you ticked the updates box. We use it to save your founder discount and email you about the launch.
- When you comment: your name, email and comment. The name and comment may appear publicly once approved; your email is never shown.
- When you answer the survey: your choices about cravings and priorities, plus anything you type in the open box.
What we measure automatically
Our own analytics are first-party and anonymous. We use a random session id stored in your browser's sessionStorage (it disappears when you close the tab), and record things like how far you scrolled, which sections you read, your device type, and where you arrived from. It tells us which ideas resonate. It isn't tied to your identity unless you also reserve.
The Meta pixel
We run ads on Instagram and Facebook, so the site also loads the Meta pixel. It tells Meta when someone looks at a product or reserves, which is how we work out which ads are worth paying for. It sets Meta's own cookies, and Meta may use it to show you our ads again elsewhere.
When you reserve, we also pass Meta your email and phone number in hashed form so it can match the reservation to the ad you came from. Hashing scrambles it one way so it can't be read back, but it is still your contact detail going to Meta. We don't send your survey answers, and we never send anything about a health condition.
A content blocker or your browser's tracking protection will stop all of this, and the site works exactly the same without it.
Who processes it
- Netlify, hosts the site and receives the reservation form.
- Supabase, the database that stores reservations, comments and analytics.
- Google (Gmail), we read and reply to your email at our contact address.
- Meta (Facebook and Instagram), the advertising pixel described above.
- Microsoft Clarity, anonymised heatmaps and session replay, so we can see which parts of a page people actually read. It records clicks, scrolling and mouse movement, not your identity, and we have typing in form fields masked.
Your choices
Want your reservation, comment or details deleted, or want off the list? Email cocoontreats.store@gmail.com and we'll take care of it.
This is a pre-launch site. This notice reflects our real practices, but the final version, with the registered entity, jurisdiction and a data-protection contact, will be reviewed by counsel before public launch.