Your privacy
Last updated: 24 September 2026
CozyDex is a small, members-only, ad-free place. We collect what we need to run it, and nothing to sell. Here’s exactly what that means.
Plain-language summary first; the details follow.
The short version
- We’re Peak Logic Ruud ENK in Norway. Reach us at hei@cozydex.club.
- We collect your email, what you put on CozyDex, and a little technical and usage data.
- Your page is public to anyone with the link. Letters are private.
- No ads, no selling data, no tracking pixels, no analytics cookies.
- Circle chat disappears after 24 hours.
- “Delete my account” in Settings deletes everything, right away.
- You have GDPR rights, and you can complain to Datatilsynet.
01Who we are
CozyDex is run by Peak Logic Ruud ENK, a small sole proprietorship in Norway. We are the data controller for the personal data described here, which means we decide why and how it’s used and we’re responsible for looking after it.
You can reach us any time at hei@cozydex.club. There’s no call centre, just us.
02What we collect
Things you give us
- Your email address, used to sign you in with a link (no passwords).
- Your page: page name (handle), display name, bio, colours, pattern and font, “now playing”, mood, desk, shelf and stickers, plus the optional extras you choose to add: favourite games, vibe tags, platforms and what you collect.
- Friend codes and socials (optional): game friend codes and your Instagram or TikTok username, if you add them. Only signed-in members can see these, and you can remove them any time.
- Images you upload to your binder, art wall or journal.
- Things you write: journal posts and replies, guestbook notes, stamps you give, and who you follow.
- Letters. These are private between the two of you. We don’t read them, except when one is reported to us or if the law requires us to.
- Circles: which circles you’re in, wall threads and replies you post, and circle chat messages. Chat messages are deleted automatically after 24 hours.
- Reports you send us about content or people.
- Waitlist: if you reserved a page before launch, your email, the name you reserved, and the optional answers you gave (favourite game, whether you collect cards).
- Who brought you here: if you visited someone’s page (or a link they shared) before joining, we remember their page name in a small cookie for up to 60 days and save it with your account, so they can get a thank-you item for their room. The cookie is only used for this.
- Terms acceptance: the time you confirmed you’re 16+ and agreed to the Terms.
Things we collect automatically
- Technical data: your IP address and basic device and browser information appear in our server logs when you visit.
- Product analytics: events like “page viewed”, “joined a circle” or “posted in the journal”, plus which site sent you here. When you’re signed in these are linked to your member ID and page name, never your email. We don’t record your screen or sessions.
- Error reports: if something breaks, a note about the error (what page, what went wrong) so we can fix it.
We don’t collect payment details. If and when you buy a membership, payments are handled by Stripe; we never see your card number.
03Why we use it (and our legal basis)
The GDPR asks us to name a legal reason for each use. Here are ours:
- To provide CozyDex to you (performance of a contract): signing you in, showing your page, delivering letters, running circles, and everything else you signed up for.
- To keep CozyDex safe (legitimate interest): server logs, handling reports, preventing spam and abuse, and enforcing the house rules.
- To understand how CozyDex is used, so we can make it better (legitimate interest): product analytics and error reports. We do this without analytics cookies, keep it to what we need, and never use it for advertising. You can object any time (see your rights), and if your browser sends “Do Not Track” we don’t send analytics at all.
- Waitlist emails (consent): we only use your waitlist email to tell you when CozyDex opens. You can ask to be removed any time.
- Legal obligations: for example, keeping accounting records once payments exist, or answering a lawful request from the authorities.
Where we rely on consent, you can withdraw it at any time, and that won’t affect anything we did before.
04What other people can see
Your page at cozydex.club/<your name> is public by default. Anyone with the link can see it, including your page name, display name, bio, binder, art, shelf, journal, stamps and guestbook (whichever sections you have turned on).
The “Findable” switch in your page editor controls whether your page shows up in CozyDex search and suggestions, and whether search engines like Google are allowed to index it. Turning it off doesn’t make the page private: people who already have the link can still open it.
- Guestbook notes and journal replies you write appear on the page you wrote them on.
- Circle walls and chat are visible to members of that circle.
- Letters are only visible to the sender and the recipient.
Please don’t put things on your page you wouldn’t want a stranger to see, like your address, school or phone number.
06Where your data lives
We keep data in the EU/EEA wherever we can. Where a provider may process data outside the EEA (for example Vercel in the US), the transfer is protected by the European Commission’s Standard Contractual Clauses and, where available, the EU-US Data Privacy Framework. Ask us at hei@cozydex.club if you’d like more detail.
07How long we keep things
- Your account and everything on it: until you delete your account. Deleting removes it straight away.
- Circle chat messages: 24 hours, then they’re deleted automatically.
- Server logs (IP address, device info): about 30 days.
- Product analytics: up to 12 months.
- Database backups: roll off within about 7 days, so deleted data disappears from backups within a week.
- Waitlist: deleted if you ask, or if you don’t join within 6 months after we launch. If you do join, it’s deleted together with your account.
- Reports: kept while needed to handle them and protect the community, then deleted along with the accounts involved.
08Your rights
Under the GDPR you have the right to:
- Access: get a copy of the data we hold about you.
- Rectification: fix anything that’s wrong. Most of it you can edit yourself on your page.
- Erasure: have your data deleted. “Delete my account” in Settings deletes everything immediately: your page, images, posts, letters, circle posts and waitlist entry.
- Portability: get your data in a common, machine-readable format.
- Objection: object to uses based on legitimate interest, such as analytics.
- Restriction: ask us to pause using your data while a question is sorted out.
Email hei@cozydex.club for any of these. We’ll answer within one month, free of charge.
If you’re unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet, at www.datatilsynet.no. We’d love the chance to fix it first, though.
10Age
CozyDex is for people who are 16 or older. You confirm this when you create your page. If we learn an account belongs to someone younger, we delete it. If you think that’s the case for an account, please tell us at hei@cozydex.club.
11How we keep it safe
- All traffic to and from CozyDex is encrypted in transit (HTTPS).
- Row-level access rules in our database make sure people can only read and change what they’re allowed to, for example only the two people in a letter can read it.
- Sign-in uses one-time email links, so there are no passwords to leak.
- Only we have admin access, and we keep it to what’s needed.
12Changes to this policy
If we change this policy, we’ll update the date at the top. If a change is significant, we’ll tell you in the app or by email before it takes effect.
Questions about any of this? Write to hei@cozydex.club. A real person reads every email.