Privacy Policy

This policy explains what information we collect when you use Cookies by Divine LLC, how we use it, and the choices you have. We collect only what we need to take your order, design your cookies, and deliver them.

• Inquiry details: your contact information, preferred date, location, design description and requested cart items. Website submissions are sent through our email service provider to our makers' mailbox. When website delivery is unavailable, the form prepares a draft in your email app; you must send it yourself. Requests do not subscribe you to marketing emails.
• Order details — your name, email, phone, and shipping or pickup address so we can fulfill and update you about your order.
• Design content: your studio messages, design briefs, reference images, and uploaded or generated artwork. We use this content to prepare your design and produce your cookies. Avoid including sensitive personal information in studio messages or images.
• Payment information — processed directly by our payment provider. We receive a confirmation and limited details (such as the last four digits); we never store your full card number.
• Usage data: basic site analytics and technical studio records, including an opaque guest-session identifier, model deployment, request status, token usage and image counts, to manage service limits and operating costs.

• To process, bake, and deliver your orders.
• To send order confirmations, updates, and support replies.
• To prevent fraud and keep the site secure.
• To improve our products, designs, and overall experience.

We do not sell your personal information. We share it only with service providers who help us operate — such as our payment processor, shipping carriers, and hosting and email providers, and only as needed to provide the service or as required by law. When you use AI design, your messages, design brief and any attached references are sent to our AI service providers to prepare the brief or artwork.

We keep order and design information for as long as needed to fulfill your order, support reorders, and meet legal and accounting requirements. We also retain studio briefs, private reference images and technical usage records to operate the service and reconcile costs. A brief's generation access expires after 24 hours; this does not automatically delete the stored content. You can ask us to delete information that we are not required to retain.

You may request access to, correction of, or deletion of your personal information, and you can opt out of non-essential emails at any time. To make a request, contact us through the contact page or your order confirmation email.

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Our site is intended for adults placing orders. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. When we do, we will revise the “last updated” date above. Significant changes will be highlighted on this page.