Last updated:
Privacy Policy
This policy describes only what the www.cuddlia.com website actually does with your data: what we collect, why, for how long, and how to take back control.
1. Who is responsible
Cuddlia publishes the www.cuddlia.com website.
For any question about your data: privacy@cuddlia.com.
2. Data we collect
Data you provide: your email address if you subscribe to the newsletter, and the name, email address and message typed into the contact form.
Technical data: language and currency preferences, your cookie consent state, and a random session identifier used to split layout variants. That identifier is not linked to any name.
Audience measurement: only if you accept it in the cookie banner. Google Analytics 4 then records page views, language, currency and an approximate location derived from the IP address.
No payment data is collected: no payment takes place on this site.
3. Purposes and legal bases
Newsletter: explicit consent (opt-in checkbox), revocable at any time.
Audience measurement and layout tests: consent, collected through the cookie banner. Until you accept, Google Consent Mode v2 stays set to “denied” and no measurement script is loaded.
Site operation (language, currency, remembering your consent choice): legitimate interest in providing a usable site; these items are strictly necessary.
Affiliate tracking: when you click through to a merchant, the merchant may set its own cookies to attribute the commission. That processing is the merchant's, under its own privacy policy.
4. Email: consent, measurement, unsubscribe
No address is added to our sends without an explicitly ticked box. We store the exact text accepted, the date, the time and the source of consent.
We record opens and clicks of our emails solely to measure how relevant our sends are. This data is never sold or used for advertising profiling.
If your server rejects a message (bounce) or you mark it as spam, your address is removed from all our sends with no action needed from you.
Every email contains a one-click unsubscribe link; the “Manage my preferences” page also lets you withdraw consent or request deletion of your data.
5. Processors and recipients
We do not sell or rent your data, and we do not share it for advertising purposes. The only recipients are the providers needed to run the site:
Site hosting and database: Lovable / Supabase.
Audience measurement (after consent): Google Analytics 4.
Affiliate program: Amazon Associates.
Some of these providers process data in the United States; transfers rely on the standard contractual clauses set out in their own terms.
6. Retention
Newsletter email addresses: until you unsubscribe, then deleted within 30 days.
Messages sent through the contact form: 24 months.
Audience measurement data: the retention configured in Google Analytics 4, 14 months maximum.
Cookie consent proof: 12 months, the lifetime of the consent cookie.
7. Your rights
Depending on your jurisdiction (GDPR in Europe, Law 25 in Quebec, PIPEDA in Canada, CCPA/CPRA in California), you have rights of access, rectification, erasure, portability, objection and withdrawal of consent.
California residents: we do not sell and do not “share” your personal information as defined by the CCPA/CPRA, and we do not run cross-context behavioural advertising. We also honour the Global Privacy Control signal by keeping audience measurement off.
To exercise a right: privacy@cuddlia.com. We answer within the timeframe set by applicable law, and within 30 days at the latest. You may also contact your data protection authority.
8. Security, minors and updates
The site is served exclusively over HTTPS and access to stored data is restricted to the people who need it to operate the site.
This site is intended for adults. It is not directed to children under 13 (COPPA) or to minors under 16, and we do not knowingly collect their data; any such data reported to us is deleted.
Any change to this policy is published on this page with a new update date.