Privacy policy
This describes what this site actually stores and who can reach it. It is written from the system rather than from a template, so where it says a thing is not collected, nothing collects it.
Last updated
Who we are
The Cosmetic Manufacturer, Los Angeles, California. For anything in this policy, including a request to see or delete your data, write to joe@thecosmeticmanufacturer.com.
What we collect, and when
| If you… | We store |
|---|---|
| Read the site | Nothing that identifies you. Aggregate page-view counts only — see Analytics below. |
| Join the waitlist | Your email address, your name if you gave one, which side of the marketplace you came in from, and the campaign parameters on the link you followed. |
| Hold an account | Your email address, your name, and which workspaces you belong to. Accounts are invite-only; there is no public signup. |
| Submit a brief | The brief as you wrote it, the shortlist the engine returned, and which manufacturers you asked to be introduced to. |
| Book a call | Whatever you give the scheduling tool. That booking happens on a third-party service under its own privacy policy. |
We do not collect payment details on this site, and we do not ask for them. Nothing here processes a card.
Who can see what
This is enforced in the database rather than in the interface, which matters: it means a page cannot show someone something by mistake.
- A brand sees its own briefs and nobody else's.
- A manufacturer sent a brief sees the project, not who is behind it. Your name reaches them only after you confirm the introduction — before that it is not merely hidden from the page, it is not sent to their browser at all.
- A manufacturer never learns who else was shortlisted alongside them.
- Our own staff can see briefs and introductions, because qualifying them is the job.
- The waitlist is visible to staff only. It is a list of people who did not agree to be visible to each other.
Cookies and browser storage
One cookie, and it only exists once you sign in: a session cookie that keeps you signed in, cleared when you sign out. Reading the public site sets no cookie at all.
Some workspace preferences — which settings you have toggled, which notices you have dismissed — are kept in your browser's own storage. They stay on your device and are never sent to us.
There are no third-party advertising cookies, no cross-site trackers and no ad pixels on this site.
Analytics
We count page views using Vercel Analytics, which is privacy-preserving by design: it does not set a tracking cookie, does not build a profile of you, and does not follow you to other sites. What we get is how many people read a page, not who they were.
Who we share it with
We do not sell personal data, and we do not share it for advertising. It reaches these service providers because the product runs on them:
| Provider | For |
|---|---|
| Vercel | Hosting the site and counting page views. |
| Supabase | The database and sign-in. Accounts, briefs, introductions and the waitlist live here. |
| Email and notification providers | Sending sign-in links, and telling our team a waitlist signup arrived. |
| A scheduling tool | Only if you book a call, and only what you type into it. |
Manufacturer profiles are a different thing
The manufacturer directory is built from public records about companies — federal registrations, inspection results, enforcement actions and information companies publish about themselves. That is business information, not personal data, and we publish it because a brand deciding where to make a product deserves to see it.
Which brands work with which manufacturers is not published. Verified product counts are public; the brands behind them never are.
If you represent a company and believe something on its profile is wrong, write to us and we will correct it.
How long we keep it
- Waitlist entries, until we launch to you or you ask us to remove you.
- Account and workspace data, for as long as the account exists.
- Briefs and introductions, for as long as the account exists. The record of an introduction both sides accepted is kept even after — it is a commercial event between two parties, and neither side is served by it becoming unreconstructable.
Your rights
Write to joe@thecosmeticmanufacturer.com and ask for a copy of what we hold about you, a correction, or deletion. We will do it. If you are in California, the CCPA gives you those rights explicitly, along with the right not to be discriminated against for using them — and since we do not sell personal data, there is nothing to opt out of.
Children
This is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If this policy changes in a way that affects what we collect or who sees it, we will change the date at the top and, where the change is material and we can reach you, tell you directly.