Skip to main content

Free standard shipping on orders $75+

Legal

Privacy Policy

Last updated: August 2026

1. Information We Collect

We collect information you provide directly to us: name, email, shipping address, and payment information when you place an order. We also automatically collect browsing data (cookies, IP address, device type) to improve your experience.

2. How We Use Your Information

We use your information to process orders, communicate about your purchases, personalize product recommendations, and send marketing emails (only if you opt in). We never sell your personal data.

3. Data Security

Beauty preferences & personalization. When you use Find My Routine (the quiz), save a shade, or tell us a texture preference, Coyglow remembers those answers as your beauty profile so routines and matches can be tailored without asking twice. Guests get this too — the profile is tied to an anonymous browser id, and signing in merges both histories (your explicit choices always win over our inferences). You can view and edit every remembered preference in My Beauty, and Reset recommendations clears them at any time. Seasonal notes expire automatically; stable traits like undertone stay until you change them. Photo-based shade matching is currently disabled.

Search personalization. When you search in everyday language, we parse the request (texture, finish, budget, shade family, routine step) to rank what you see. Your current search always outranks remembered preferences. We keep only the parsed, de-identified intent for product analytics — not your raw search text.

Visual search. Images you upload or link for visual search are processed temporarily to describe and match them, then discarded. We never use them to identify people, infer age, ethnicity, or any medical condition. Image links are restricted to approved public hosts and checked against internal-address abuse before anything is fetched.

Decision experimentation. We may compare ranking or explanation approaches side by side before any change reaches customers. Approaches only reach production after offline evaluation and human approval; prices, inventory, and factual claims are never experimented with.

Web performance measurement. We sample real-page speed metrics (how fast content appears and stays stable) labeled by page type, device class, and release version — no query text, profile data, or identifiers are attached.

All payment data is encrypted using TLS 1.3 and processed through PCI-DSS compliant payment processors. We do not store full credit card numbers on our servers.

4. Your Rights (GDPR / CCPA)

You have the right to access, correct, or delete your personal data. To exercise these rights, email [email protected]. We respond within 30 days.

5. Cookies

We use essential cookies (cart, authentication) and optional analytics cookies (Google Analytics). You can manage cookie preferences in the consent banner.

Questions about this policy? Email [email protected]