Privacy Policy

Last updated: October 31, 2026.

This policy explains what information My Decor Life handles when you visit mydecorlife.com, use its contact form, or send an email to the site. It describes the tools the site actually uses, which are Cloudflare hosting and Workers, Cloudflare Turnstile, Cloudflare Email Routing, Google Analytics 4, Amazon affiliate links and a browser setting for light or dark theme. The site has no accounts, comments, newsletter, display advertising, online sales or payments.

Who this policy covers

My Decor Life is operated by the site’s owner. The owner is not named publicly on the site, and no company name, street address, or phone number is published. The published contact for privacy matters is [email protected], and the Contact and complaints section explains how messages to that address are handled.

This policy applies to mydecorlife.com, to its contact form and to email sent to that address. It takes effect on the date shown at the top of this page. It does not apply to websites or services the site links to, including Amazon, or to services run by Google and Cloudflare under their own policies. Each of those companies is responsible for its own practices, and this policy describes only how the site uses them.

The writers shown on the site are editorial personas, as the Terms explain. A persona does not personally read or answer messages, even where a page is written in the first person.

Information the site handles

The site handles a small amount of information, which falls into the categories below.

Information you choose to send

You can send information directly to the site in two ways, through the contact form on the Contact page or by email to [email protected]. The contact form collects your name, your email address, a subject and your message. An email carries your email address, your name if you include it, your message, and anything else you include or attach. A decorating question might include room dimensions, natural light, what has to stay, your budget and photos of your home. A product suggestion might include a product name, a listing link and your comments. A correction might include a page address and a note about what you noticed. Please send only what is needed, and do not include payment details, government identifiers, health details or other sensitive information. Please also think before sending photos, as images of a home can reveal more than you intend.

Information processed automatically

When you visit any web page, your browser sends standard request data to the server. On this site, that data goes to Cloudflare and includes your IP address, the page requested, and technical details about your browser and connection. Cloudflare uses that data to serve and protect the site.

Google Analytics 4 runs on the site under measurement ID G-J08XL1E4RM. It sets cookies and records pages viewed, approximate location, device information and the referrer, which is the page that sent you to the site. The site uses this for aggregate traffic measurement.

Cloudflare Turnstile checks each contact form submission for bots, and it processes browser and device signals to do so. The site uses that check to protect the form from automated abuse.

Cookies and local storage

The site uses the storage technologies below.

  • Google Analytics sets cookies in your browser to distinguish visits and measure traffic.
  • The site saves your light or dark theme choice in your browser’s local storage so that the choice can be remembered.
  • Amazon may set its own cookies when you follow an affiliate link.

The theme choice stays as a setting in your browser, and the site does not keep a database of it. The site itself does not need you to log in, so it does not use login cookies. This policy does not list individual storage items, if any, used by Cloudflare Turnstile, and Cloudflare’s own documents describe how that service works.

Information received from others

The site receives traffic reports from Google Analytics. Cloudflare Turnstile gives the contact form a result so that a submission can be checked. Amazon may provide reports about activity connected with the site’s links under the Associates Program. The site has no process for obtaining a reader’s name or Amazon account details from those reports. A person who writes to the site could also mention someone else in a message, so please be careful about sharing another person’s details. No other source of visitor information is part of the site’s current setup.

Information the site does not ask for

The site has no sign-up or checkout, so it does not ask you for a password, payment card, delivery address or date of birth. The contact form asks only for the four items described above. Any details you give when you buy from Amazon go to Amazon and not to My Decor Life.

The site is aimed at adults in the United States, where many privacy laws do not ask a website to name a legal basis for each use of information. The site has no accounts or sales, so it does not rely on a contract with you to handle your information. This policy does not claim that you have given consent to any particular use.

If a law such as the GDPR or UK GDPR applies to you, the site’s handling of information would be assessed under that law. In that case, interests in running, securing and understanding the site, in protecting the contact form from bots, and in handling the messages people choose to send, are the purposes the site relies on, to the extent the law allows. The site may also process information where the law requires it. The applicable rights are described in Other state and regional rights.

How information is used

The site uses information for the purposes below.

  • Request data is used by Cloudflare to deliver pages and to protect the site from abuse and attacks.
  • Analytics data is used to see, in aggregate, which pages are read and where the site could improve.
  • Browser and device signals are used by Cloudflare Turnstile to check contact form submissions for bots.
  • Contact form messages and email are delivered through Cloudflare to the owner’s private inbox.
  • Those messages may be used by the site’s owner to read and answer your message, consider a suggestion, make a correction and keep a record of the conversation.
  • The theme setting is used to display the site in the way you chose.
  • Affiliate data is used by Amazon to attribute qualifying purchases to the site’s Associates account.
  • Information may be used where needed to investigate misuse, enforce the Terms, protect rights and safety, or meet a legal obligation.

The site does not use information in the following ways.

  • Your email address is not added to a newsletter or mailing list, because the site does not have one.
  • Information is not used to create an account or a public profile, because the site has neither.
  • The site does not use your information for display advertising, because it does not run any.

The site has no feature of its own that takes automated decisions about you with legal or similarly significant effects. Cloudflare Turnstile makes an automated bot check on a form submission, and if that check stops your message, you can email [email protected] instead.

Advertising and tracking

My Decor Life does not run display ads and does not use a display advertising network. No advertising cookies are set by a display ad network on this site, because the site does not use one. The site also has no sponsored posts or paid placements, as explained on the Disclosure page.

The site does use two kinds of tracking that you should know about. Google Analytics uses cookies for measurement, and Amazon may use cookies to link a visit or qualifying purchase to the site’s Associates account. Amazon has its own advertising business, and what it does on its own website is covered by Amazon’s privacy notice. The site does not control that activity.

The site’s current practices do not include selling the names, email addresses or messages you send or exchanging them for money. Information is processed by the service providers described in this policy as part of running the site. That includes Cloudflare for hosting, security, the contact form’s bot check and message delivery, Google for analytics, and the email provider behind the owner’s private inbox. When you follow an affiliate link, Amazon receives information directly from your browser.

Some privacy laws define sale or sharing much more broadly than the everyday meaning of those words. Those definitions may, in some cases, reach cookie-based data flows to third parties even where no money changes hands. For that reason, this policy states what the site does and does not do, rather than making a blanket claim under any particular law. The California privacy information section has more detail.

Information may also be disclosed in the situations below.

  • It may be disclosed where the law, a court order or a valid legal request requires it.
  • It may be disclosed where reasonably needed to protect the rights, property or safety of the site, its readers or others.
  • It may be disclosed where reasonably needed to investigate fraud, security problems or misuse.
  • It may be transferred if the site is sold or transferred to a new owner, in which case stored messages could pass with the site as the law allows.

The site has no feature that automatically publishes messages, and sending one does not mean it will appear on the site.

Third-party services

The site’s active services and their roles are as follows.

Cloudflare hosting and Workers

Cloudflare hosts the static site, which is served by a Cloudflare Worker. It processes request data, including IP addresses, to serve and protect the site. Cloudflare’s practices are described in its privacy policy.

Cloudflare Turnstile

Cloudflare Turnstile protects the contact form by checking each submission for bots. It processes browser and device signals to do that check. The same Cloudflare privacy policy linked above is the starting point for Cloudflare’s practices.

Google Analytics 4

Google Analytics measures site traffic in aggregate, as described above. Google’s practices are described in its privacy policy. Google offers a browser add-on for opting out of Google Analytics, where it is available for your browser.

Amazon Associates

The site participates in the Amazon Services LLC Associates Program, and its product roundups contain Amazon affiliate links. An Amazon link on the site carries an identifier for the site’s Associates account, which is how Amazon can attribute a qualifying purchase. When you click one of those links, you leave this site, and Amazon may use cookies or similar technologies to connect the visit or a qualifying purchase to the site’s account. Amazon’s practices are described in its privacy notice. The Disclosure page has more about these links.

Contact form delivery

When a contact form submission passes its check, a Cloudflare Worker sends the name, email address, subject and message to the owner’s private inbox. The site keeps no database of those messages. The message is handled by the site’s owner once it reaches that inbox.

Cloudflare Email Routing

Mail sent to [email protected] is forwarded by Cloudflare Email Routing to the owner’s private inbox. It is then handled by the site’s owner. This policy does not identify the email provider behind that private inbox, and that provider may have its own practices. You should assume that anyone with access to that inbox or the systems that carry and store it may be able to see what you send.

Services that are not active

The site does not use a newsletter service, comment system, account system, payment processor or display ad network.

Your rights and choices

You have several practical choices, whichever laws apply to you.

  • You can read the site without sending any personal information directly to it, although standard request data and analytics still apply as described above.
  • You can choose not to use the contact form or send an email, and you can decide how much to include if you do.
  • You can email [email protected] instead of submitting the contact form if you would rather not go through a Turnstile submission check.
  • You can block or delete cookies in your browser settings, although some features may behave differently if you do.
  • You can limit Google Analytics by using Google’s opt-out add-on or a browser tool that blocks analytics.
  • You can clear your saved theme choice by clearing site data in your browser.
  • You can avoid Amazon’s affiliate cookies by not following the site’s Amazon links, and you can manage Amazon-related settings through Amazon.

The site has no feature of its own that changes how it behaves when your browser sends a Do Not Track signal. Blocking cookies or using a browser opt-out applies only to that browser and device, so you may need to repeat it elsewhere.

Depending on where you live, you may have the right to ask for access to personal information about you, or to ask that it be corrected or deleted. You may also have the right to object to certain uses, or to ask for a copy of information you provided. This policy does not promise that every right applies to every reader.

The route for requests is email to [email protected], and there is no automated procedure or online portal. The handling of messages to that address is described in Contact and complaints. Please describe what you are asking for and include the email address you used on the contact form or to write to the site, if that is relevant. Before a request is acted on, you may need to confirm that it really comes from you, such as by replying from the same email address. Any confirmation should be limited to what is reasonably needed for that purpose. Please do not send a government identifier or other sensitive document unless it is specifically requested and you are comfortable providing it. If someone is acting for you, evidence of their authority may be requested, where the law allows it.

The site holds very little that can be linked to a named person, and that is mainly the messages in the owner’s private inbox. Analytics data is held in Google’s systems rather than in a site database, and request data and Turnstile signals are handled by Cloudflare. Some requests may need to go to those providers directly. A request may be refused or limited where the law allows, such as where information must be kept for legal reasons. Where the law sets a deadline for a response or a right to appeal, those rules will apply. The site’s content remains open to you whether or not you make a privacy request.

Security

The site is served over HTTPS through Cloudflare. Cloudflare Turnstile checks contact form submissions for bots. The site has no user accounts and stores no personal data of its own on the site, which limits what a site breach could expose. Cloudflare’s protections help serve and defend the site.

No website, network or email service is completely secure, and the site cannot guarantee absolute security. Email in particular may pass through several systems, and it should not be treated as a secure channel. Contact form messages also reach the owner through an email inbox, so the same caution applies to them. A security problem at a provider or in the inbox could still affect the information held there. The policy does not claim any security audit, certification or other assurance beyond the measures described here. If a security incident occurs that requires notice under applicable law, notice will be given as that law requires. You can help by keeping your own device and browser up to date. If you notice a security concern on the site, you can report it to [email protected].

Retention

The site does not have a database of its own for visitor information or messages, and this policy does not state fixed retention periods. The points below describe what is known.

  • Google Analytics data is kept according to the retention setting of the site’s Analytics property and Google’s own practices.
  • Cloudflare keeps request, Turnstile and message-delivery data according to its own practices.
  • Contact form messages and email stay in the owner’s private inbox for as long as the owner keeps them there, and no fixed deletion schedule applies.
  • The theme choice stays in your browser until you clear it or it is changed.
  • Cookies last for the period set by the provider that placed them, unless you delete them sooner.

A decision to keep or delete a message may depend on whether it is still needed to answer you, follow up on a correction, keep a record, resolve a problem or meet a legal obligation. You can ask for a message to be deleted by emailing [email protected], and any request will be considered under the law that applies to you. Deleting a message from the inbox does not affect copies held in your own sent mail or by other email providers that carried it.

Children and intended audience

My Decor Life is written for adults in the United States who are decorating their own homes. It is not directed to children under 13, and the site does not knowingly collect personal information from them. The site has no accounts, comments or sign-up features that would invite a child to provide information. The contact form does not ask visitors to state their age, so the site cannot tell how old a visitor is.

If you believe a child under 13 has sent personal information to the site, please email [email protected] so that the request can be considered. A parent or guardian may be asked for enough information to find the message and confirm the request.

Where information is processed

The site’s market is the United States, but its providers operate internationally. Cloudflare, Google and Amazon may process information in the United States and in other countries, under their own arrangements. The location of the owner and of the provider behind the owner’s private inbox is not published in this policy.

The laws of those places may differ from the laws where you live. This policy does not claim any specific international transfer safeguard on behalf of the site. Any transfer safeguards offered by a provider are described in that provider’s own documents.

External websites

The site links to other websites, and Amazon is the most common example. Those websites make their own decisions about what they collect and how they use it, and they are not covered by this policy. The site does not control them, and it is not responsible for their privacy practices. Please read the privacy information on any website before you give it personal information. Any information you provide when you buy from Amazon or another seller goes to that business and not to My Decor Life.

California privacy information

This section is for California residents. The California Consumer Privacy Act, as amended, applies only to businesses that meet certain legal thresholds, and this section is not a statement that the site meets them. It is included to help you understand the site’s actual practices, and where the law does apply, you can use the request route described here.

The categories of personal information handled through the site are limited.

  • Identifiers can include your IP address, online identifiers in cookies and, if you use the contact form or write to the site, your email address and name.
  • Internet activity can include pages viewed, the referring page, technical details about your browser and device, and the signals Cloudflare Turnstile processes for a form submission.
  • Approximate location can be derived from network information.
  • Message content can include whatever you choose to put in a contact form message or an email.

These categories come from the sources and are used for the purposes described in this policy. The site’s current practices do not include selling personal information for money. The site does not use personal information for display advertising, and it has no display ad network. Because analytics cookies and Amazon’s cookies involve third parties, this policy does not make a blanket statement about how those flows would be classified under the law’s broad definitions of sale and sharing. The site’s current practices do not include knowingly selling or sharing the personal information of consumers under 16. The site has no feature of its own that uses sensitive personal information to infer characteristics about you.

Where the law applies, California residents may have rights to know what personal information is collected and how it is used, and to access, correct and delete it. They may also have rights to opt out of sale or sharing, to limit certain uses of sensitive personal information, and not to be discriminated against for using these rights. The route for any of those requests is email to [email protected], and an authorized agent may contact the same address. The process for confirming a request is described in Your rights and choices. The site has no feature of its own that changes how it behaves in response to an opt-out preference signal, so please use the browser tools described above and email the site with any request.

California law also allows residents to ask about disclosure of personal information to third parties for those third parties’ direct marketing purposes. The site’s current practices do not include giving email addresses or messages to third parties for their direct marketing. The site has no public posting features, so there is no posted content for a California minor to remove.

Other state and regional rights

Several United States states have consumer privacy laws that give residents rights to access, correct, delete or obtain a copy of their personal data, and to opt out of certain sales, targeted advertising or profiling. Those laws often apply only to organizations above certain size or data thresholds, so this policy does not claim that any given law applies to the site. If you live in one of those states and believe a right applies, email [email protected]. Where the law gives you a right to appeal a decision, you can ask for that by writing to the same address, and you may be able to contact your state attorney general.

Nevada law allows residents to direct certain website operators not to sell certain covered information, using a narrower meaning of sale that involves money. The site’s current practices do not include selling covered information for money. A Nevada resident who wishes to make a request may email [email protected].

The site is not aimed at visitors outside the United States, but it can be reached from elsewhere. If the GDPR or UK GDPR applies to you, you may have rights of access, correction, deletion, restriction, objection and portability. You may also have a right to complain to your local data protection authority. The same email address applies to those requests.

Changes to this policy

This policy may change if the site’s tools, practices or legal obligations change. The date at the top of this page shows when it was last updated. The site has no accounts or email list, so changes will normally be shown by posting the new version here and not by sending individual notices. A change to the site’s practices, such as a newly added service, should be described in this policy. Where the law requires a different form of notice or a new choice, that requirement will be followed.

Contact and complaints

Privacy questions and complaints can be sent through the contact form on the Contact page or by email to [email protected]. Privacy rights requests should go by email to that address, as described in Your rights and choices. The contact form and the email address are separate routes, and both are currently offered. The form is protected by Cloudflare Turnstile, and a Cloudflare Worker sends each submission to the private inbox of the site’s owner. Email sent to [email protected] is forwarded by Cloudflare Email Routing to the owner’s private inbox. Messages sent by either route are handled by the site’s owner. No phone number or street address is published for the site. The site does not promise a response time, and it cannot guarantee that every message will arrive.

If you have a concern that is not resolved, you may have the right to complain to a regulator. Depending on where you live, that may be your state attorney general, the Federal Trade Commission or a local data protection authority.