1. Overview & Our Commitment to Bakers
At AllCottage Studio (“AllCottage”, “we”, “our”, or “us”), operating via allcotagore.my.id, we take the confidentiality of your artisanal cottage bakery recipes, business margins, and personal data seriously. This Privacy Policy outlines what information we collect, how it is used, and how your privacy rights are respected under United States federal regulations, state privacy statutes (such as the California Consumer Privacy Act / CCPA), and international privacy frameworks.
2. Client-Side Architecture & Recipe Confidentiality
We believe your secret sourdough formula, spice blends, and proprietary ingredient ratios are your bakery's trade secrets.
- Local Browser Storage: Unless you explicitly register and authenticate an account, all recipe ingredients, pricing calculations, batch yields, and label customization settings are stored locally in your web browser’s LocalStorage.
- Offline PDF Rendering: Printable Avery label sheets (5163, 5164, and thermal formats) are compiled and drawn entirely client-side using JavaScript (jsPDF). Your label texts and customer data are never scraped or sold.
3. Information We Collect
Depending on how you interact with AllCottage, we may collect the following information:
- Registered Accounts: When you create an account or sign in with Google OAuth, we receive your email address, name, bakery name, state of operation, and an encrypted hash of your password (salted via bcrypt). We never store raw plain-text passwords.
- Newsletter & Sweepstakes Submissions: When you voluntarily enter our annual Cottage Baker Grant Sweepstakes or subscribe to our newsletter, we collect your email address and state code to send periodic legal updates and contest results.
- Telemetry & Operational Analytics: To ensure high uptime and optimize state food law templates, our server logs anonymized pageview telemetry, including hashed IP addresses, browser user-agent strings, referring URLs, and statutory state queries (e.g. TX DSHS or California CFO).
4. Cookies, Web Beacons & Third-Party Advertising
AllCottage is provided free of charge to home bakers. To support server hosting, regulatory database maintenance, and ongoing development, we partner with reputable third-party advertising networks (including Adsterra and programmatic advertising partners).
These third-party vendors may use cookies, JavaScript tags, or web beacons to serve advertisements relevant to your baking and culinary interests when you visit our website. These cookies allow ad servers to recognize your device to measure advertising effectiveness and deliver sponsored bakery resources.
Your Opt-Out Rights:
You may opt out of personalized third-party interest-based advertising by visiting the Network Advertising Initiative (NAI) opt-out page at optout.networkadvertising.org or the Digital Advertising Alliance (DAA) at aboutads.info.
5. California Consumer Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act (“CCPA”) and California Privacy Rights Act (“CPRA”), California residents are entitled to specific rights regarding their personal information:
- Right to Know: You may request the categories and specific pieces of personal data collected about you.
- Right to Delete: You have the right to request deletion of your account and personal details from our databases.
- Do Not Sell or Share My Personal Information: We do not sell your personal identifying information for monetary consideration. Any ad-related data sharing can be controlled via browser cookie settings or the NAI opt-out links above.
6. European & International Visitors (GDPR)
If you access AllCottage from the European Economic Area (EEA) or United Kingdom, processing of your personal data is conducted under legitimate business interests and user consent for voluntary communications. You retain the right to access, rectify, port, or erase your stored data at any time by contacting our privacy compliance desk.
7. Data Security & Retention
We employ industry-standard technical measures to safeguard your information, including automated SSL/TLS encryption (HTTPS), SQLite WAL (Write-Ahead-Logging) with restricted filesystem permissions, and one-way cryptographic hashing for all credentials.
8. Contact Us & Privacy Requests
If you have any questions regarding this Privacy Policy, wish to exercise your data access or deletion rights, or want to discuss enterprise bakery compliance, please reach out to our privacy officer: