Legal
Privacy Policy
Last updated: June 24, 2026
This Privacy Policy explains how The Cottage Commons("we," "us," or "our") collects, uses, and protects information about you when you use our platform at thecottagecommons.com. We are a marketplace connecting cottage food sellers and buyers. We take your privacy seriously and aim to be transparent about what we collect and why.
1. Who We Are
The Cottage Commons is an online marketplace platform based in the United States. We connect independent cottage food sellers with buyers in their area. We are not a food producer, retailer, or payment processor — we are a marketplace platform.
2. Information We Collect
We collect the following types of information:
Account Information
When you register, we collect your first name, last name, and email address. If you register as a seller, we also collect your address for the purpose of calculating your selling radius and displaying your general location to buyers.
Usage Data
We may collect basic analytics about how you use the platform — such as pages visited and actions taken — to improve the service. This is tied to your account or session where applicable.
Messages
Messages sent between buyers and sellers through our platform are stored in order to provide the messaging feature. We do not read or sell your messages.
Payment Information (Future)
We do not currently process payments. If we introduce payment processing in the future (e.g. via Stripe), payment details will be handled directly by that third-party processor — we will not store raw card numbers or banking details. We will update this policy and notify users before any payment collection begins.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Enable communication between buyers and sellers
- Display seller listings and selling radius to buyers
- Send transactional emails (account verification, contact form replies)
- Improve and maintain the platform
- Comply with applicable laws
We do not sell your personal data. We do not use your data for advertising purposes or share it with advertising networks.
4. Data Opt-Out
You may opt out of non-essential data collection at any time by visiting our Data Opt-Out page. When you opt out, we store your preference locally on your device and will not collect usage analytics for that device.
Please note that this opt-out is device-specific. If you use a different browser or device, you will need to opt out separately on that device. Core account data (your email, name, and address) is still required to operate your account and cannot be opted out of while your account is active.
To request deletion of your account and associated data, contact us via our contact page.
5. Cookies & Local Storage
We use cookies and browser local storage for authentication sessions and user preferences, including storing your data opt-out preference. We do not use third-party tracking cookies or advertising cookies.
6. Data Sharing & Third Parties
We share data with the following third parties only as necessary to operate:
Brevo (Email)
We use Brevo to send transactional emails such as account verification and contact form replies. Your email address is shared with Brevo only for this purpose.
Hosting & Infrastructure
Our platform is hosted on servers located in the United States. Your data is stored and processed there.
Stripe (Future)
If payment processing is introduced, we intend to use Stripe. Stripe has its own privacy policy and handles payment data directly. We will update this section when payments are introduced.
We do not share your data with any other third parties, data brokers, or advertisers.
7. Data Retention
We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it by law (e.g. for fraud prevention or legal compliance).
Messages between buyers and sellers are retained to provide the messaging feature and may be kept for a reasonable period after account deletion for dispute resolution purposes.
8. Children's Privacy
Our platform is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Your Privacy Rights
Depending on where you are located, you may have rights regarding your personal data, including the right to access, correct, delete, and obtain a copy of your data, as well as the right to opt out of certain data processing. To exercise any of these rights, contact us via our contact page.
10. Security
We take reasonable technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security, but we work to maintain industry-standard protections.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify registered users by email. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
Want to opt out of data collection?
You can opt out of non-essential data collection on this device at any time.