Privacy policy

This policy describes the CozyGames storefront at cozygames.ca, its custom-artwork feature, shopping and support services, and the providers involved. CozyGames is based in Quebec, Canada. Browsing the site or reading this policy does not by itself authorize optional analytics or advertising tracking.

Privacy Officer / Person Responsible for the Protection of Personal Information

Send personal-information requests, access or correction requests, withdrawal-of-consent requests, deletion requests and privacy complaints to support@cozygames.ca, addressed to the Privacy Officer. You may also write or call using the existing business contact details below.

CozyGames
Privacy Officer / Person Responsible for the Protection of Personal Information
2140 Rue Du Parc Gomin
Quebec, QC G1T 1A5
Canada
+1 581-459-8963
support@cozygames.ca

The person exercising the highest authority in an enterprise is responsible under Quebec law unless the function has been delegated in writing. No individual is named here without a confirmed designation.

Information collected and its purposes

  • Customer and contact information: your name, email address, telephone number, billing address and delivery address when supplied for an order or a support request. These details allow us to process the transaction, communicate with you and arrange delivery.
  • Order and transaction information: products, sizes, quantities, custom-order attributes, prices, discounts, shipping charges, taxes, payment status, order references, and return or refund information. These records support fulfillment, customer service, warranties and required business records.
  • Payment information: payment details are entered into Shopify checkout or the selected payment provider’s interface. This custom storefront does not collect or store full card numbers or card security codes. Shopify and payment providers process the payment; CozyGames receives transaction information needed to manage the order.
  • Customer-account information: Shopify maintains customer records associated with purchases. The CozyGames storefront does not currently offer its own account registration or collect account passwords. If you use a Shopify or Shop Pay account, that service’s account and privacy terms also apply.
  • Support communications: the contents of your messages, order references, photos and other information you choose to send. These are used to respond to questions, investigate problems and handle requests or complaints.
  • Custom artwork: your uploaded file, original filename, image dimensions, selected mat size, placement settings, upload time and a design reference. These are used to prepare and fulfill your requested custom product.
  • Reviews: the display name, email, rating, review title, review text and product reference you submit. Judge.me processes the submission. Published reviews display the submitted public review content and name; do not put private information in that content.
  • Technical information: network requests necessarily provide an IP address and browser/request information to hosting, commerce and content-delivery providers so they can deliver pages, images, security and shopping functions.
  • Optional analytics and advertising information: if you allow the relevant category, browser and device identifiers, pages visited, referral information, product interactions, cart activity and checkout starts are processed as explained below. Clarity can also record page interactions for session replay and heatmaps.

Information comes directly from you, from your browser and from the providers processing the requested transaction or interaction. If you do not provide information needed to fulfill an order or resolve a request, we may be unable to complete that particular service. Optional tracking is not required to shop.

Custom artwork and reviews

Choosing a file initially displays a local preview in your browser. When you proceed from the design review to the cart, the artwork is uploaded to cloud storage before payment. File and placement references are attached to the cart and Shopify order for fulfillment. The storefront does not email uploaded artwork before payment.

Uploaded files use a unique retrieval link. A person with that link can retrieve the file; the link is not protected by a customer login. Avoid sensitive personal information in artwork or filenames and contact us before uploading confidential material. Upload only content you have permission to provide and review our Intellectual Property information.

Leaving the cart does not automatically delete an uploaded file. You may request removal through the Privacy Officer, including if you did not complete a purchase. A custom upload is not permission to use your artwork for unrelated advertising.

Review submission is voluntary. The review form sends your submission to Judge.me for review processing and publication. See Judge.me’s privacy information for its handling of that service.

Cookies, storage and optional tracking

Necessary functions: the store uses browser storage for your cart, a short-lived product-data cache and your privacy choices. Shopify and hosting providers may use necessary cookies or similar mechanisms for checkout, security and service operation. The cart is stored on your device until it is changed or browser data is cleared; the product cache expires after approximately 90 seconds. Refusing optional tracking does not disable the cart or checkout.

Analytics, only with consent: Microsoft Clarity provides session replay and heatmaps, and PostHog measures site usage and shopping interactions. These tools can identify a browser over time and analyse behaviour. Clarity uses identifiers such as _clck and _clsk; PostHog uses storage identifiers beginning with ph_. PostHog is configured to use its United States service endpoint.

Advertising, only with consent: Meta Pixel processes website interactions such as product views, cart additions and checkout starts for ad measurement, attribution and advertising profiles. It may use identifiers such as _fbp and _fbc. Meta may associate this information with information it holds under its own privacy policy. Clarity’s advertising-storage permission also follows this choice.

These optional tools are not loaded by this storefront until you grant their category. You can accept all, refuse non-essential tracking, or choose analytics and advertising separately. A choice is retained in this browser for up to 180 days, after which the store asks again. A new browser, cleared storage or a revised consent version can also require a new choice. Where browser storage is blocked, a choice may last only for the current page.

Privacy choices on cozygames.ca is always available in the footer and here. Withdrawing a permission stops future collection by the affected storefront tools and reloads the page to unload them, while retaining your saved cart. We remove known optional first-party tracking storage; this does not erase information already held by a provider or cookies that only another domain can remove. Contact the Privacy Officer about deletion or other rights.

A browser’s Global Privacy Control signal keeps advertising consent off. We pass the current analytics and advertising choices, with optional preference and data-sale consent off, to Shopify when creating a checkout. Shopify’s own checkout controls and privacy settings also apply. A cookie choice is not an email-marketing subscription.

Providers and disclosures

The implementation uses the following providers or categories for the purposes described above:

  • Shopify: product catalog, cart, checkout, customer/order records and commerce services. Payment providers selected through checkout handle payment processing. See Shopify’s Consumer Privacy Policy and Shopify’s privacy portal.
  • Hosting and storage: Sites hosting and Cloudflare deliver the storefront and support storage of uploaded artwork and related operational records.
  • Judge.me: product/store review display and review submissions.
  • Printing, fulfillment and delivery providers: the artwork, order and shipping details needed to make and deliver the product. Ask us for information about the providers involved in your order.
  • Microsoft Clarity, PostHog and Meta: optional analytics or advertising as described above, according to your choices.

Information may also need to be disclosed where applicable law permits or requires it, for example to respond to a valid legal demand or handle a dispute. This policy does not represent that optional Shopify data-sharing or enhanced-advertising services are enabled. External links, including Instagram, lead to separate services governed by their own practices.

Processing outside Quebec

These services can involve storage, access or processing outside Quebec, including elsewhere in Canada, the United States and other countries where the relevant providers operate. Laws in those places may differ and may permit authorities to access information. PostHog’s configured endpoint is in the United States. Contact the Privacy Officer for more information about a provider or transfer affecting your information.

Contact the Privacy Officer with questions about where information relating to your order is processed and the safeguards applicable to that processing.

Retention and security

Retention depends on the purpose: fulfilling an order, handling support or warranty matters, keeping required accounting records, resolving a dispute or complying with law. The current artwork feature does not apply an automatic deletion deadline to abandoned uploads. Ask the Privacy Officer about a particular record or a deletion request. Applicable law requires destruction or lawful anonymization when the purposes are complete, subject to legally required retention.

The storefront uses HTTPS, payment entry takes place through Shopify/payment providers, and custom artwork is retrieved using the unique links described above. These measures do not guarantee absolute security. Do not email full card details, passwords or unnecessary sensitive information. Report a suspected privacy or security incident to support@cozygames.ca.

Your rights and withdrawal of consent

Subject to the conditions and exceptions in applicable law, you can request:

  • confirmation that personal information about you is held, and access to that information;
  • correction of inaccurate, incomplete or ambiguous information, and deletion of information collected, used or kept contrary to law;
  • withdrawal of consent for a use or disclosure that depends on consent, including optional tracking;
  • information about purposes, categories, recipients and retention, and an explanation of the consequences of withdrawing consent;
  • a copy of eligible computerized personal information collected from you in a structured, commonly used technological format, and transfer where the law provides;
  • cessation of dissemination, de-indexing or re-indexing where the legal conditions are met.

Withdrawal does not undo processing already lawfully carried out, and certain order or legal records may still need to be retained. Privacy rights are not conditional on accepting advertising or analytics.

Requests and complaints

Write to the Privacy Officer at support@cozygames.ca and describe the information or issue. Include only the details needed to locate your records, such as an order reference. We may need to verify your identity or an authorized representative’s authority before disclosing information.

Quebec access and correction requests must be answered in writing within 30 days of receipt, subject to applicable law. Any refusal must include the legally required reasons and recourse information. For a privacy complaint, describe what happened and the outcome you seek; the Privacy Officer is the contact for receiving and reviewing it.

You may contact the Commission d’accès à l’information du Québec about your rights, a complaint or a dispute. You do not have to waive a regulatory or legal remedy to contact us.

Children and policy updates

Do not submit a child’s personal information or artwork containing it without the authorization required by law. Where consent is needed for a child under 14, Quebec law generally requires consent from the holder of parental authority or tutor, subject to the statutory exception. Contact the Privacy Officer if a child’s information has been submitted inappropriately.

Changes will be dated and posted on this page, with additional notice or renewed consent where required. You can keep or print this policy. Questions about a purchase are also covered by our Terms and Returns & Order Issues Policy.