Legal
Privacy Policy & Terms of Use
Plain-English version. We collect what we need to respond to your order request, we don’t sell your data, and we delete it when you ask.
Effective June 16, 2026 · Questions: forms@frontendhorizon.com
1. The TL;DR
When you submit our order request form (or the floating feedback widget), The Cookie House and its development partner Frontend Horizon receive what you typed plus a small amount of technical data we use to keep the form from being abused by bots. We use that information to respond to you. We don’t sell or rent your data, share it with advertising networks, or set tracking cookies for ad targeting.
2. What we collect
From the order form (when you submit it)
- What you type — your name, phone, email, and the order details you wrote (flavors, quantity, date, occasion, notes)
- Honeypot field — an invisible form field used to catch bots; if you accidentally fill it, your submission is silently discarded
Captured server-side automatically
- Source URL — which page you submitted from, for context
- Time-on-page signal — when the form was first opened, compared against submission time to filter out instant bot fills
- IP address & user-agent — recorded in server logs for ~30 days for abuse mitigation (rate limiting, blocking spam)
What we don’t collect
- No third-party advertising or social-media tracking pixels
- No third-party fingerprinting
- No location more precise than what your IP discloses
3. Why we use it
- To respond to your request. A real person reads what you sent and gets back to you, typically within 24 hours, with availability and your total.
- To send a confirmation email letting you know we received your request — only if you provided an email address.
- To prevent abuse. The IP, user-agent, and time-on-page signals detect and block automated spam.
4. Who sees it
- The Cookie House — the bakery you’re ordering from.
- Frontend Horizon — the team that built and operates the site. Lead alerts route through
forms@frontendhorizon.com. - Resend — our transactional email provider, used to deliver alert and confirmation emails (resend.com).
- Our server host — handles the HTTPS request and stores server logs (~30 days).
We don’t sell your data, share it for advertising, or trade it with other companies. Period.
5. How long we keep it
- Email content — kept in the recipient inbox until manually deleted, or until you request deletion.
- Server logs — IP, user-agent, timestamps: ~30 days, rotating.
6. Your rights
You can email forms@frontendhorizon.com any time and ask us to send a copy of what we have on file, delete it, or stop following up. We’ll honor those requests within a reasonable timeframe.
7. Brief terms of use
- The site is provided as-is, for general informational purposes. Submitting the form is a request, not a confirmed order; we confirm availability and price before anything is baked.
- The Cookie House operates under Texas cottage food law: made in a home kitchen not inspected by the Texas Department of State Health Services.
- By using the site, you agree to the laws of the State of Texas governing any dispute related to your use of the site.
8. Contact
Privacy questions or deletion requests: forms@frontendhorizon.com. To place an order, use the order request form.
The Cookie House · Mabank & the Cedar Creek Lake area, TX
Frontend Horizon · frontendhorizon.com