Privacy Policy

1. Local-First Architecture & Data Sovereignty

Our desktop applications operate on a strict local-first philosophy:

• Your Data Remains on Your Computer: All collection records, encounter dates, custom ratings, tags, notes, and local media attachments are stored 100% locally on your machine. They are never uploaded to CozyMuseum servers or any cloud database.
• Open, Portable Formats: Your data is stored in standard local formats. You can inspect, copy, back up, or delete your application files at any time with complete freedom.
• Sunset Guarantee: Your ownership is permanent. If CozyMuseum ever ceases operations, our constitutionally binding Sunset Guarantee commits to issuing a DRM-free offline activation tool, ensuring your paid software remains fully functional forever.

2. Curatale Purchases, Licensing & Device Activation

Curatale is a commercial software product purchased once for lifetime personal use with minimal necessary data exchange:

• Merchant of Record (Lemon Squeezy): All order checkouts, invoicing, card processing, currency conversion, and sales tax compliance are handled independently by Lemon Squeezy under full PCI-DSS Level 1 compliance. CozyMuseum never receives, views, touches, or stores your credit card credentials.
• Cryptographic Device Allowance: To activate your lifetime license (up to 2 concurrent PCs for Standard Edition, up to 5 for Bespoke Edition) without invasive monitoring, the app transmits an irreversible one-way cryptographic hash of your hardware identifier (SHA-256(MachineGuid)). We do not record plaintext hardware fingerprints or MAC addresses.
• Self-Serve Device Management: You can manage or release registered devices at any time via a secure one-time link at https://cozymuseum.app/manage-license.

3. Network Connections & Windows Capabilities

While our applications are fully usable offline, specific optional features interact with external web services upon your request:

• Scientific Media & Video Streaming: High-resolution scientific illustrations and natural-history clips are loaded on demand from source archives (Wikimedia Commons, Unsplash, GBIF) or embedded via YouTube. Destination services receive standard HTTP connection metadata governed by their respective privacy policies.
• Outbound References: Taxonomic links to external authorities open in your default browser only when explicitly clicked.

4. Website Analytics, Newsletter & Your Rights

We use Google Analytics strictly to monitor aggregated website performance and improve reader experience. We do not use advertising cookies, do not track you across the web, and never sell your data.

• Google Analytics 4 (GA4): On our public web showroom (cozymuseum.app), we observe aggregate readership (Measurement ID: G-D9PG2MT1X3) with automated IP anonymization. The script initializes only after human engagement and is suppressed on sensitive authentication pages.
• Voluntary Newsletter: Submitting your email in the Great Hall newsletter form adds you to our announcement list. We use this exclusively for occasional essays and product releases. Every email includes an instant, 1-click unsubscribe link.
• Zero Data Selling: We have never sold, rented, or monetized personal information to third parties, and will never do so.

5. Support & Direct Contact

If you have questions, feedback, or data requests regarding this Privacy Policy, please write to us directly:

CozyMuseum Support
Email: hello@cozymuseum.app
Website: https://cozymuseum.app