Privacy Policy

Last updated: June 2026

TrueCottage LLC ("TrueCottage," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our platform at truecottage.com.

1. Information We Collect

Account information: When you sign up, we collect your email address and password (stored securely via Supabase Auth). We also collect your name or display name if provided.

Profile information:

• Buyers: Zip code, used to show nearby makers.
• Sellers: Business name, business address, cottage food license information, service radius, and any public contact methods (email, phone, link) you choose to display so customers can reach you. Public contact methods are visible to anyone, by design; only add ones you are comfortable publishing.

Subscription and billing information: Seller subscriptions are billed through Stripe. Stripe receives your payment details directly; we store only your subscription plan, status, and Stripe customer reference. We never store your card number or payment credentials.

Location data: We use your zip code and address to display nearby products and sellers. Addresses are geocoded using Mapbox to calculate distances. We do not track your real-time location.

Product listings: Sellers provide product descriptions, pricing, ingredient lists, allergen information, and photos. This information is publicly visible on the platform.

Usage data: We collect standard web analytics data via Google Analytics, including pages visited, time on site, and general geographic region (not precise location). This data is anonymized and aggregated.

Communications: If you contact us or submit a waitlist form, we collect the information you provide.

2. How We Use Your Information

• To create and manage your account.
• To show Buyers nearby Sellers based on zip code proximity.
• To provide and bill seller subscriptions through Stripe.
• To send transactional emails (account and billing notices) via Resend.
• To improve the platform through aggregate usage analytics.
• To communicate with you about your account or the platform.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

3. Information Sharing

We share information only as necessary to operate the platform:

• Between Buyers and Sellers: Buyers see a Seller's public profile, general location (city level), and the contact methods the Seller chose to publish. When a Buyer contacts a Seller, they share whatever they choose to share directly; TrueCottage is not part of that exchange.
• Supabase: Our database and authentication provider. Data is stored on Supabase's infrastructure. See Supabase Privacy Policy.
• Stripe: Subscription billing for Sellers. Stripe receives your payment information directly. See Stripe Privacy Policy.
• Cloudinary: Product images are stored and served via Cloudinary.
• Mapbox: Address geocoding. Addresses are transmitted to Mapbox to calculate coordinates.
• Resend: Transactional email delivery.
• Google Analytics: Anonymized usage analytics.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights, safety, or property of TrueCottage, our users, or the public.

4. Seller Address Privacy

We understand that Sellers may be concerned about their home address being shared. Here's how we handle it:

• Seller registered addresses are not publicly displayed on the platform. Buyers see only the Seller's general area (city or neighborhood level).
• The contact methods shown publicly are only the ones the Seller explicitly chose to publish in their dashboard.
• If a Buyer arranges a pickup, the Seller shares their address directly, at their own discretion, through whatever channel they choose.

5. Data Retention

We retain your account information for as long as your account is active. If you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required for legal or accounting purposes (e.g., order records for tax purposes).

6. Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), secure authentication via Supabase, and Row Level Security (RLS) policies that restrict data access to authorized users. However, no internet transmission is 100% secure.

7. Cookies and Tracking Technologies

TrueCottage uses:

• Session cookies: To keep you logged in via Supabase Auth.
• localStorage: To store authentication tokens locally in your browser.
• Google Analytics cookies: To collect anonymous usage statistics. You can opt out via the Google Analytics Opt-out Browser Add-on.
• Meta Pixel: We use the Meta (Facebook) Pixel to measure page views and the effectiveness of any advertising we run on Meta platforms. The Pixel may set cookies and receive your browser information and the pages you visit on our site. You can limit this via your Meta ad preferences, browser tracking protections, or the Digital Advertising Alliance opt-out.

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information in your profile.
• Request deletion of your account and personal data.
• Opt out of marketing emails (transactional emails about your account and billing cannot be disabled).

To exercise any of these rights, contact us at hello@truecottage.com.

9. Children's Privacy

TrueCottage is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

10. Colorado Privacy Rights

Colorado residents may have additional rights under the Colorado Privacy Act (CPA), including the right to access, correct, delete, and opt out of the sale of personal data. TrueCottage does not sell personal data. To submit a request under the CPA, contact us at hello@truecottage.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the platform constitutes acceptance of the updated policy.