Privacy Policy

1. Scope and operator

Cogalloy · 造界 (“Cogalloy”, “we”, “us”) operates this website and its online store. This policy applies to visitors, customers, newsletter subscribers, and people who use our support chat.

This policy covers information handled through our own website and store services. Third-party services that you use directly—such as a payment or delivery provider—may have their own privacy notices.

2. Information we collect

We collect information only as needed for the interaction you choose.

• Technical and usage information, such as IP address, browser and device information, referring page, visited page path, timestamps, and basic service or security log data.
• Shopping and order information, such as email address, name, delivery address, country or region, postal code, cart contents, product or variant, quantities, price or currency, and customer or order identifiers.
• Checkout-verification information. We send a one-time email code to confirm checkout; the verification record is designed to retain a protected code value rather than the readable code.
• Support information, such as chat messages, language, the page where help was requested, and a browser-generated support-session identifier. We collect your email in a support conversation only if you choose to provide it.
• Newsletter information: your email address and subscription status in our “subscribe” customer group.
• Preference information stored in your browser, including selected language, currency, cart identifier, and support-chat session identifier.

3. Cookies and browser storage

We use functional cookies and browser storage to keep core journeys working. You can delete or block them through browser settings; doing so can reset preferences, remove an active cart, or stop access to a recently completed order.

• Language-preference cookie: up to one year.
• Browser local storage: currency, cart identifier, and support-chat session identifier.
• Temporary HTTP-only order-access cookie: up to seven days for the verified purchaser to view a completed order.
• Analytics is described separately below.

4. How and why we use information

• Operate the store, retain a cart, verify checkout email, and provide order, payment, or delivery communications.
• Answer support questions, continue a requested support conversation, and escalate an issue to a human support member when needed.
• Manage newsletter subscriptions and send messages that you ask us to send.
• Protect the service, prevent fraud or abuse, apply rate limits, troubleshoot, and maintain security.
• Understand aggregate website and product engagement so we can improve content, products, and the purchase journey.
• Meet applicable legal, tax, accounting, dispute-resolution, or regulatory obligations.

5. Support chat and automated assistance

We use local support automation to help draft replies and may involve a human support member when a request needs follow-up. Your chat messages are not used as checkout data or a newsletter registration unless you separately provide an email and ask for follow-up.

Please do not submit passwords, full payment-card numbers, government identity documents, health information, or other highly sensitive information in chat.

6. Website analytics

When analytics is enabled, this site loads Umami Cloud to measure page visits and product engagement, such as “Add to Cart”. We configure our own custom analytics event so it does not include checkout email, shipping address, or support-chat text, and we do not use the analytics integration to associate activity with a named customer account.

The analytics provider may process service data in its operating locations. Browser privacy controls or content blockers may prevent its script from loading; the service may then not measure that visit.

7. When information is shared

We share information only when necessary to run, secure, or fulfil the service, including with:

• The commerce infrastructure provider that supports cart, checkout, and order management.
• Email-delivery, hosting, infrastructure, and security service providers.
• Authorized support staff and the support tools that we operate.
• The website analytics provider when analytics is enabled (Umami Cloud).
• A payment, delivery, or fulfilment provider that you choose or that is needed to complete an order.
• Authorities or other recipients when disclosure is required by law or needed to protect rights, safety, or the service.

8. Retention and deletion

We retain information for no longer than reasonably needed for the purposes above, unless a longer period is required or permitted by applicable law. Order records may need to be retained for fulfilment, customer service, accounting, tax, dispute, or legal purposes.

Newsletter information is kept while your subscription is active. Support conversations are kept while needed to answer, follow up on, and reasonably document the request. When information is no longer needed, we take reasonable steps to delete or de-identify it.

• Checkout-verification code records are intended to expire after about 10 minutes.
• Website cookies and browser storage expire or remain as described above, or until you remove them in your browser.

9. Your choices and requests

Depending on the law that applies to you, you may be able to request access to, a copy of, correction of, deletion of, restriction of, or objection to our processing of your personal information, or withdraw consent where processing relies on it.

You can ask us to remove your newsletter subscription, manage cookies and browser storage through your browser, or contact us about a privacy request. We may need enough information to verify the request and may keep information where law requires it.

10. Security, international processing, and changes

We use technical and organizational measures that are appropriate to the risk to help protect the information we handle. No internet transmission or storage method can be guaranteed completely secure.

Our service providers may process information in a country different from yours. We use them only to provide or secure the service and take reasonable steps required by applicable law when information is handled across borders.

If we make a material change to this policy, we will update this page and its “Last updated” date. Please review the policy periodically.