Privacy notice

Information you enter

The Grooming Finder asks for your dog's breed, size, coat characteristics, grooming goal, matting severity where relevant, noise sensitivity, your grooming experience, and budget. It does not ask for your name, email address, payment information, or postal address.

We use these selections to calculate equipment matches using CoatKey's programmed scoring rules and product catalog. The current matching flow does not send your answers to an AI model or save an answer record in the product database.

Saved answers and shared links

The Finder saves selections in your browser's tab-session storage. Use Start over in the Finder to clear those saved selections and reset the form. This does not sign you out or clear unrelated browser storage. Browser settings and session restoration affect how long selections persist; there is no fixed expiry timer.

New Results and comparison links do not include your Finder selections. These pages use answers saved in the current tab. If tab-session storage is unavailable, answers are kept in memory until the page reloads. A link opened without saved answers requires a new Finder search. Older links created before this change contain readable encoded answers, not encryption. Such copies can remain in history, messages, or provider logs. The application ignores answers embedded in old links and removes that parameter after loading; the initial request may already have reached the hosting service. Start over does not erase earlier copies.

Website services and analytics

CoatKey uses Lovable for its preview and website platform and Supabase for catalog requests and configured authentication services. Your browser connects to these services to load the site. Requests can expose technical information such as IP address, URLs, browser information, and timing. Font files now load from CoatKey's website rather than Google Fonts. Before this change on October 11, 2026, the site used externally hosted Google Fonts; this change does not delete information previously received by that service.

Visitor analytics was disabled in CoatKey's Lovable project on October 11, 2026 after inspection showed an analytics request containing a full Results URL with encoded Finder selections. Before it was disabled, Lovable's reports covered visits, page views, visit duration, traffic sources, viewed pages, device categories, and country estimates. Disabling collection does not delete information already received by the provider.

Inspection of the published prototype on October 11, 2026 found page-hit analytics containing a timestamp, session identifier, and browser user-agent information. A separate Lovable event request reported page-performance measurements, the page path, and session, page-view, and trace identifiers. The observed performance request used the website's /__l5e/trackevents endpoint. The inspected Results-page analytics payload also included its full URL with encoded Finder selections. A subsequent published Results-page reload recorded 24 requests, with none matching analytics or trackevents. This is evidence for that tested load, not a guarantee across all flows. Cookies and other provider logging remain unverified.

CoatKey's pilot event collection is currently disabled. Aggregate counter storage and automated cleanup have been installed, but the guide and Finder do not send pilot event records while collection is off. A technical readiness check may read a restricted database report to verify the server connection; it returns only a readiness status and does not increment counts or display report contents. Counter reports are not publicly accessible. Website providers may separately process request metadata as described in this notice.

The installed counter cleanup is configured to keep the current UTC date and the preceding 89 dates of daily totals. It removes short-lived minute totals once they are older than an hour and completed cleanup-job records after seven days. The cleanup runs every minute, so removal may occur shortly after an expiry boundary. Provider logs, backups and other copies have separate retention practices. Installing this storage does not enable pilot collection or Lovable visitor analytics.

The inspected website stored cookies named __dpl and session-id. Their exact lifetimes and purposes have not been verified. Cookie expiration dates do not establish how long related information is retained in provider systems.

Application error-boundary reports now use a limited summary: a standard error category or HTTP status and a known page path. The application omits the original message, stack, cause, and arbitrary context from these reports. CoatKey's server catch handlers and its Error-object console wrapper also use limited summaries with a standard error category and validated HTTP error status where available. They omit raw messages, stacks, causes, and arbitrary thrown values, and the temporary server error capture holds only the summary. Other console arguments, hosting request logs, and independently supplied platform diagnostics can still include technical details or URLs; their complete collection and retention have not been verified. If you use sign-in, authentication sessions can persist in local browser storage separately from Finder answers. On supported embedded Lovable preview surfaces, the integration can also share the session with the Lovable editor. Start over does not clear sign-in storage. These services support website delivery, authentication where used, and diagnosing failures.

Amazon links and third-party privacy

As an Amazon Associate I earn from qualifying purchases.

CoatKey includes Amazon affiliate links. We may receive a commission from qualifying purchases through these links. They include our affiliate identifier; the application does not add your Finder answers to the Amazon destination link.

When you follow a link, you leave CoatKey and interact with Amazon. Amazon may collect information directly and use cookies or similar technologies to recognize your browser, attribute referrals, and personalize content or advertising under its own notices and settings. Third parties serving content or advertising may also collect information directly and place or recognize cookies. Review Amazon's Privacy Notice and advertising preferences on Amazon's website.

Your choices

Use Start over to clear saved Finder selections, avoid sharing result links, remove history entries in your browser, and manage cookies and website storage in browser settings. Clearing all website storage may also sign you out. Browser controls do not delete copies held in messages or provider logs.

Use Amazon's own privacy, cookie, and advertising controls for Amazon services. Advertising opt-outs may limit personalization rather than remove advertisements. Contact CoatKey with questions or requests; we may need information to identify the relevant records and will explain what we can address directly or through our providers.

Retention and scope

Finder storage follows the browser behavior described above. CoatKey's connected Supabase organization currently uses the Free plan, with a normal one-day API/database log window. This is not a promise that every provider copy, export, or data store is deleted after one day. Lovable retains operational/security logs for its service and security needs, with longer retention for incident investigations and no fixed day limit in its current policy.

The project enables AI app context. Lovable documents 90-day retention specifically for AI-call context logs; the current Finder matching flow makes no AI calls. This period is not a deadline for all analytics, hosting, or error records.

This notice describes the current prototype. The deployed privacy page has been checked for analytics, performance events, and cookies. A complete inventory across the Finder, results, comparison, and sign-in flows, along with provider retention and log exports, remains unverified. We do not claim the site is cookie-free or that all data stays on your device. We will update this notice as services and data practices change.