Privacy Policy

We aim to collect as little personal data as possible. When you simply browse this website, we do not require you to create an account or provide personal information.

We may collect: usage data (pages viewed, device and browser type, approximate region) through analytics; information you provide when you email us or contact support (your email address and message); and order information when you buy a pack, which is processed by our payment provider (see Payment processing below) rather than stored by us directly.

We use cookies and similar technologies to keep the site working and to understand, in aggregate, how it is used so we can improve it. Analytics cookies help us see which pages and packs are popular; they do not tell us who you personally are.

Our analytics provider is PostHog (PostHog Inc., hosted in the United States; PostHog participates in the EU-U.S. Data Privacy Framework). By default we measure visits anonymously and without cookies — nothing is stored on your device, and each page view is counted without connecting it to you. Only if you accept the cookie banner do we set an analytics cookie so your visits can be counted as one visitor; decline and nothing is ever stored, while the site works exactly the same. PostHog records the pages viewed and buttons clicked (for example, which brush pack pages are popular), approximate region, and device type. We do not use advertising trackers and we do not sell data.

You can control or block cookies through your browser settings. Blocking some cookies may affect how parts of the site function.

Purchases on this website are handled by our third-party checkout provider, LavaTop. When you buy a pack, you are taken to LavaTop's secure checkout to complete payment. Your payment details (such as card numbers) are entered on and processed by LavaTop — we never see or store your full card details.

LavaTop processes your data under its own privacy policy. We receive only the information needed to fulfil and support your order (for example, confirmation of purchase and a contact email).

Besides our payment provider, we rely on a small number of third parties to run Brusher — for example website hosting, content delivery, analytics, and email. Each processes data only as needed to provide its service.

The Brusher iOS app is distributed through the Apple App Store; any data you provide to Apple (including subscriptions and in-app purchases) is governed by Apple's privacy policy.

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, or export it, to object to or restrict processing, and to withdraw consent. If you are in the EU/EEA or UK these are your GDPR rights; if you are a California resident, the CCPA gives you similar rights, including the right not to be discriminated against for exercising them. We do not sell your personal data.

To exercise any of these rights, email us at the address in the Contact section and we will respond within the timeframe required by law.

We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access — for example, serving the site over HTTPS and relying on reputable providers for hosting, analytics and payments. No method of transmission or storage is ever 100% secure, so while we work hard to protect your information we cannot guarantee absolute security.

Because payments are handled entirely by our checkout provider, sensitive payment details never touch our own servers.

Brusher works with providers that may store or process data in countries other than your own, including outside the EU/EEA. Where we transfer personal data internationally, we rely on our providers' safeguards (such as standard contractual clauses) to keep it protected to a comparable standard.

We keep personal data only as long as necessary for the purpose it was collected — for example, support emails for as long as needed to help you, and order records for as long as required for accounting and legal obligations. Aggregated analytics data that cannot identify you may be kept longer. When data is no longer needed, we delete or anonymise it.

Brusher is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be highlighted where appropriate. Your continued use of the site after an update means you accept the revised policy.

This site and the Brusher brand are operated independently by the Brusher team; Brusher is a brand and website, not a registered company. If you have any questions about this policy or your data, email us at [email protected] or use our contact page.