Privacy Policy | Cooter Cakes

Who this notice covers

To be confirmed by the operator operates Cooter Cakes and handles information used for the website, digital gifts, account services, partner applications, and platform support. Contact To be confirmed by the operator with a privacy question or request, or use the postal contact below.

The bakery identified for your order receives information needed to prepare, fulfill, and support that order and has its own responsibilities for its business records. This notice explains our platform's practices. The current service-provider table identifies other organizations used to operate the service.

Information we collect and why

When you browse, create a gift, register, apply as a bakery, place an order, or contact support, we use the information needed for that activity. This can include your contact and account details, gift recipient first name and message, order items and timing, delivery address when relevant, payment references and status, communications, consent records, and issue evidence.

For bakery applications and quality work, information can also include business contacts, production locations, permits or insurance records, approved product information, staff access, and quality-control photos. Technical data such as session identifiers, device/browser information, network information, and operational or security events helps operate the site and investigate errors or abuse.

We use these records to provide requested services, process and reconcile payments/refunds, coordinate the identified bakery, send necessary updates, resolve complaints, protect accounts, maintain required business records, and administer approved promotions. Please provide only information needed for the request, especially in messages and uploads.

Payments and card details

Stripe processes card payment through its payment components for the selected bakery. Our application keeps payment identifiers, amounts, and payment/refund status; it does not store your full card number or card security code. Stripe and the bakery process payment information under their respective roles.

A card is not saved for later charges merely because you place an order. Any offered saved-payment feature requires a separate explanation and choice. Do not send card numbers, security codes, or bank credentials by email, gift message, or support upload.

Authorized bakery staff receive the customer and order details needed for their assigned preparation, fulfillment, and support work. Authorized platform staff receive information needed for their role. Service providers process information for the actual services listed below, such as hosting, payment processing, email delivery, storage, or operational monitoring.

We may disclose relevant information where needed to meet a valid legal obligation, address fraud or safety incidents, protect applicable rights, or manage a reviewed business transaction, with the safeguards and notices applicable to that situation. We do not turn private quality records or support photos into public marketing content without separate permission.

Processing locations and arrangements: To be confirmed by the operator

Current advertising and other data-use practices: To be confirmed by the operator

Inventory details: To be confirmed by the operator

Browser storage, measurement, and choices

The site uses browser storage and related technical information for functions such as maintaining a session, protecting forms, remembering appropriate choices, and operating payment components. Any optional analytics or advertising that is enabled must be described in the current inventory below, together with its purpose, duration, and available controls.

Your choice about marketing email is separate from placing an order or receiving an essential service message. You can withdraw marketing permission through the unsubscribe option or by contacting To be confirmed by the operator. Withdrawal does not stop receipts, account-security notices, or necessary updates about an existing order.

We do not add a gift recipient to a marketing list because someone sends them a gift. Permission to show a review or reuse reaction footage is also a separate choice. Additional privacy choices required for your location are described in any applicable supplement.

Inventory details: To be confirmed by the operator

Cootergrams and private links

Anyone who holds a Cootergram share link can view its permitted gift content. Treat that link as shareable, not confidential. A recipient can forward it or make a screenshot or downloaded copy. The default link life is 90 days; the creation screen shows the actual expiry, and the sender can revoke the link through the separate management control.

Public gift pages and previews do not expose the purchaser's contact details, delivery address, order/payment identifiers, or private order-tracking credentials. Gift, order, and authentication pages use controls that discourage indexing and limit unnecessary URL disclosure; those controls do not prevent a person from sharing a link they hold.

Keep management, order-tracking, and authentication links private. Revocation or expiry disables access through our service but cannot retrieve copies that another person already saved or posted. Gift-link secrets and private order/authentication URLs are excluded from ordinary analytics and are suppressed or normalized in access and error logs.

Private uploads and security

Customer issue photos, bakery business documents, and quality-control images are access-controlled records, not a public gallery. The service validates uploads before authorized review and limits access to people who need them. Separate approval is required to use a private image in public content.

We use access controls, secure connections, protected credentials, and monitored operational procedures appropriate to the service described here. No online system can guarantee that an incident will never occur. If an incident affects your information, we will assess it and provide notices and assistance where required.

How long information is kept

Cootergram share content normally expires after 90 days, unless you revoke it earlier. Unconverted bakery-application drafts normally expire after 90 days. Ordinary application operational logs normally have a 30-day retention period, and authentication/security logs a 90-day period.

Transaction and related account records: To be confirmed by the operator

Partner documents, support evidence, and quality-control records: To be confirmed by the operator

Backup deletion and recovery copies: To be confirmed by the operator

A documented dispute, incident investigation, or preservation obligation can require specific relevant records to be kept longer. We restrict retained records to the relevant purpose. Expiring a public gift link does not erase the separate records needed to support an order or a valid legal/accounting obligation.

Requests and updates

Contact To be confirmed by the operator to request access to, correction of, or deletion of information associated with you, or to ask about an applicable privacy choice. We may ask for reasonable verification and enough information to locate the record. Do not send passwords or full payment credentials. We will explain any information that must be retained and the reason relevant to your request.

If you believe a child has submitted personal information that should not be held by the service, contact the same privacy address so we can assess and address it. We do not use a gift's recipient details as permission for a new marketing purpose.

The version and effective date at the top identify this notice. We will explain material changes and request a new choice where required; a new notice does not itself grant permission to repurpose previously collected information. Applicable location-specific information appears below when required.

Contact the operator

Operator: To be confirmed by the operator

To be confirmed by the operator

Support: To be confirmed by the operator

Privacy questions