Privacy
What we keep, and why.
Short version: an email address if you ask for the letter, anonymised click data so we know what people find useful, and a bag that lives in your own browser. No tracking cookies, nothing sold.
Effective
01Who we are
Elizabeth Dane Home (“we”, “us”) is a small home-decor journal and shop based in the Texas Hill Country. [Legal entity name and form to be confirmed by the owner.] This policy covers elizabethdanehome.com and the emails we send. It does not cover Amazon, Instagram, Facebook or Pinterest; each has its own policy, and we link to them from the site.
Questions about anything here: hello@elizabethdanehome.com.
02What we collect
Less than you might expect. There are four things.
- Your email address, if you ask for the letter. Optionally your first name. We also record where on the site you signed up (for example the home page or a particular look), the date, your country, your browser’s user-agent string, and a one-way hash of your IP address so we can tell abusive sign-ups from real ones.
- Outbound click records. When you follow a product link to Amazon, or send your bag to Amazon’s cart, we log which product or products, where you were on our site, the referring page if your browser sends one, any campaign tags in the address (utm_source, utm_medium, utm_campaign), your country, your browser’s user-agent string, the time, and a hash of your IP address. We never see what you buy or whether you buy.
- Rate-limit counters. To stop automated abuse of our forms we keep a short-lived counter keyed by a hash of your IP address. These are deleted after about a day of inactivity.
- Ordinary server logs kept by our host for security and debugging, which include the pages requested and technical details of the request.
About the IP hash. We do not store your IP address. We store a SHA-256 hash of it combined with a secret value that only lives on our server. If that secret is ever missing, we store nothing at all. The hash cannot practically be turned back into your address, and it cannot be matched against hashes made anywhere else.
03Your bag
The bag is stored in your own browser using localStorage (the key is edh.cart.v1). It never leaves your device on its own. It does not sync between devices and we cannot see it.
When you choose to check out, the list of items in your bag is sent to our server once, so we can build the Amazon cart link. That request is logged as an outbound click record (see above) and nothing else is kept. Clearing your browser’s site data empties the bag.
05How we use it
- To send you the letter, if you asked for it, and to stop sending it when you ask us to.
- To understand which looks and pieces people find useful, in aggregate, so we know what to make next.
- To keep the forms working and free of spam and abuse.
- To meet legal obligations if any arise.
We do not sell personal information, we do not share it for advertising, and we do not build profiles of individual visitors.
06Who handles it for us
We use a small number of service providers, each acting on our instructions:
- Cloudflare hosts the site and the database where subscriber records and click records live. Data is processed in the United States.
- Cloudflare delivers the letter, as the same service that serves this site. Your address is not copied into any email marketing platform: our own database is the only list, which means no other company holds it. Every letter carries an unsubscribe link, and using it removes you from that database directly.
- Amazon receives you when you leave to buy. From that moment Amazon’s privacy notice and conditions of use apply, not ours. Links to Amazon may carry an affiliate tag that identifies this site as the referrer; it does not identify you.
We do not share personal information with anyone else, except if the law requires it or to protect the site and its visitors from abuse.
07The letter (email)
You are added to the list only when you type your address into one of our forms and submit it. We do not buy or import lists. Each letter includes an unsubscribe link at the bottom; using it stops the letter immediately. You can also write to hello@elizabethdanehome.com and we will remove you by hand.
When you unsubscribe we keep your address on a suppression record so we do not email you again by mistake. Ask us and we will delete that too.
08How long we keep things
- Subscriber records: for as long as you are subscribed, then as a suppression record until you ask us to delete it.
- Click records: up to 24 months, after which they are deleted or reduced to counts that cannot identify anyone.
- Rate-limit counters: about 24 hours after the last request.
- Server logs: per our host’s standard retention, typically days to a few weeks.
09Amazon and affiliate links
Product links on this site lead to Amazon. Your purchase, payment, shipping and returns are handled by Amazon under Amazon’s terms, and any information you give Amazon is governed by Amazon’s privacy notice.
We may participate in the Amazon Services LLC Associates Program, an affiliate advertising program. Where we do, links may carry our Associates tag and we may earn a commission from qualifying purchases. This never changes the price you pay, and Amazon does not tell us who bought what.
10Your choices and rights
- Leave the letter with the link at the bottom of any email, or by writing to us.
- Ask what we hold about you, have it corrected, or have it deleted. Email hello@elizabethdanehome.com; we will reply within 30 days and may need to confirm you own the address first.
- Empty your bag any time from the bag drawer or by clearing site data in your browser.
If you live somewhere with a privacy law that gives you specific rights, including California, Texas, the European Union or the United Kingdom, those rights apply and we will honour them. We do not sell or share personal information as those laws define it, and we do not discriminate against anyone for exercising their rights.
11Children
The site is for adults furnishing their homes. We do not knowingly collect information from anyone under 13. If you believe a child has given us an email address, tell us and we will delete it.
12Security
Everything travels over HTTPS. IP addresses are hashed before they are stored. Secrets such as API keys live only on the server. Access to the database is limited to the people who run the site. No method is perfect, and if something goes wrong that affects you, we will tell you.
13Changes to this policy
If we change how we handle personal information, we will update this page and the effective date at the top. For a material change that affects subscribers we will also say so in the letter.
14Contact
Elizabeth Dane Home, Texas Hill Country. Email hello@elizabethdanehome.com.