Privacy
Your browser choices and private requests, explained.
When a service is closed
Each request or affiliate application form stays unavailable while its service is closed, and this website does not submit personal details through a closed form. You can browse maker links and keep a basket or saved shortlist in this browser.
Browser storage
Saved pieces and the shopping basket contain product identifiers and selected sizes/quantities. A submitted request uses a random request identifier and private status key saved in this browser. Keep the key private; clearing site data may remove access. Names, email addresses and delivery addresses are not saved in browser storage by this interface.
Optional referral attribution
A creator referral is saved only after you choose Accept. The last referral you accept can apply to a CottonAsana request for up to 30 days. You can decline or use Forget referral on the affiliate page. No CottonAsana commission is earned on purchases made through maker links.
Order and affiliate information
Checkout collects your name, email, destination country, selected pieces and consent; Stripe collects the full shipping address and payment details. An affiliate application collects your name, email, public channel, requested code and agreement. These are stored privately for fulfillment, operating the requested service, fraud controls and financial reconciliation. Affiliate dashboards show their own commission records without customer names or contact details.
Payments and suppliers
Stripe handles card details under its own privacy terms. A paid order’s necessary delivery details are shared only through the approved manual fulfillment process. An affiliate receives no customer shipping details. We do not sell your request data or use it to promise automatic supplier purchases.
Access and retention
Use your private reference and access key for order status. Do not put keys into public messages or URLs. Request, payment and receipt records may need to be retained for service, accounting, disputes and legal obligations; no automatic deletion period is promised. See the support page for the current contact path. Each service opens only after its own operating checks pass.
Hosting and external sites
Hosting/security logs may include connection information. Following an external maker link takes you to that company’s privacy policy. This interface adds no advertising pixel. Updated 26 October 2026.