The short version
If that covers your question, you can stop reading. The rest is the same thing in detail, organized so you can find the part you need.
Who we are
KozyKraft is a two-person operation run by Abdel and Amr.
When this policy says "we," "us," or "the bakers," it means the two of us. There is no marketing department. There is no analytics team. Just two people answering email between bakes.
What we collect
We collect three buckets of information. That's the whole list.
1. What you give us at checkout
- Your name, shipping address, and email address — so we can ship the box and email a tracking number.
- Your phone number — only if you check the SMS-updates box. Otherwise, blank.
- Your payment details — handled by Stripe. We never see or store your card number; we see only the last four digits and a token.
2. What your browser sends
- Pages you visit on kozykraft.com, when, and the page that referred you.
- Rough location (city, state) inferred from IP — for shipping cost calculation.
- Browser, screen size, and device — used to know if a layout broke for someone.
3. What you write to us
- Emails, contact-form messages, Instagram DMs, and texts. Stored in our inbox so we can reply.
- Photos you attach to a starter-help email — used only to diagnose your jar, then archived in a folder we never share.
Why we use it
Six reasons. That's the whole list.
- To ship you a box and email tracking.
- To handle a refund, replacement, or starter rescue.
- To reply to your questions.
- To send the Sunday Letter — only if you've subscribed.
- To know if a recipe page got broken in a particular browser.
- To follow the law (taxes, fraud screening, lawful requests).
We do not use your data to train models, score your behavior, predict what you want next, or build a profile of you. We are bakers.
Your rights
You can reach us through our contact form to:
- See what we have on file for you.
- Correct or update anything.
- Delete it entirely. We'll confirm within a week.
- Opt out of any list (Sunday Letter, SMS, etc.) at any time.
California, EU, and UK residents have additional rights under CCPA, GDPR, and UK GDPR. Same email gets you the same answer either way.
Changes to this policy
If we change anything material, we'll update the "last updated" date at the top and email anyone with an account. Small clarifications won't trigger a notice.