Privacy Policy

Who we are

Home Craft Blog (“we,” “us,” or “our”) is a home decor blog at https://blog.homecraftblog.com. It is run by an individual, independent publisher under the name Home Craft Blog, who decides how the information described here is used. Our guides site at https://homecraftblog.com has its own privacy policy.

This policy covers this website only. It does not cover the websites we link to, which have their own policies.

You can reach us about anything in this policy:

• Email: contact@homecraftblog.com
• Our contact form
• Mail:
  Home Craft Blog145 Tyee Dr, PMB 59462Point Roberts, WA 98281USA

Information we collect

Information you give us. When you use our contact form, we receive the name, email address and message you type, so we can read and reply. When you sign up for a free download, we receive your email address (see Email list and free downloads). If you email us directly, we receive whatever your message contains.

Information collected automatically. When you read the site, some technical information is processed automatically: the pages you view, the site that sent you here, your browser and device type, and your approximate location (country or region, worked out from your IP address). We count visits with two cookieless analytics tools: Umami, open-source software we run on our own server, and Cloudflare Web Analytics (a script from static.cloudflareinsights.com that reports the page, referrer, browser type, country and load time). Neither sets cookies or follows you to other sites, and we only look at the totals. We also use Google Analytics, which can use cookies where you allow them; see Analytics (Google Analytics) below.

Information collected through advertising. The site shows ads from Google AdSense. Google and other third-party vendors may place and read cookies on your browser, or use web beacons and IP addresses, to collect information as a result of ad serving on this site. See Advertising below for what that involves and how to control it.

Hosting and spam protection. The site runs on Cloudflare, which processes your IP address, the page requested, your browser’s user agent and the time of the request in order to deliver pages and protect them from attacks. Our sign-up forms use Cloudflare Turnstile to check that a person, not a bot, is submitting them; it does not set advertising cookies.

Cookies and similar technologies

Our own code sets no cookies. The site stores three small items in your browser’s local storage so your privacy choice works: your choice itself, which consent rules apply where you are, and whether you have already seen the confirmation for a Global Privacy Control signal. Google Analytics sets two cookies on homecraftblog.comwhere you allow them, Google’s advertising code sets its own cookies when it shows ads, and our host may set a security cookie when it checks for bots. Every item, with its purpose and lifetime, is listed in our Cookie Policy.

How we use information

• To read and answer the messages you send us.
• To send the free downloads and emails you sign up for (see the email list section below).
• To show advertising, which pays for the site and keeps it free to read.
• To measure how the site is used, in aggregate, so we know which topics are useful and what to write next, and so we can show advertising partners the size of our audience (totals only, never individual visitors).
• To keep the site running and secure, block spam and automated abuse, and meet our legal obligations.

We do not sell personal information for money, and we do not build advertising profiles about you ourselves.

Legal bases (EEA, UK and Switzerland)

• Consent for advertising cookies, personalized ads and Google Analytics cookies, given through Google’s consent message, and for the email list. You can withdraw it at any time.
• Legitimate interest in running, measuring and protecting the site: cookieless analytics (including the cookieless signals Google Analytics sends when cookies are refused), hosting, security and spam checks, and answering messages you send us.
• Legal obligation where a law requires us to keep or disclose information.

Email list and free downloads

When you ask for a free download, such as the Gallery Wall Starter Kit, we collect the email address you type in. We also store which page and which kit you signed up from, your approximate country (as reported by Cloudflare), and a one-way hash of your IP address that we use only to stop repeated automated sign-ups. Nothing is saved until you submit the form.

We email you the kit straight away. From then on we email you room ideas from the blog and, from time to time, offers from our shop, Goods by Loft, which has the same owner as Home Craft Blog. Every email has an unsubscribe link, and unsubscribing takes effect right away. If someone else entered your address, one click on that link removes it.

The list runs on listmonk, open-source email software on our own server in Germany, and a copy of each sign-up is kept in our Cloudflare database. Emails are delivered by Brevo, an email-sending service that acts only on our instructions. Like most email services, it records whether each email was delivered, bounced or reported as spam, and whether it was opened or a link in it was clicked, and it passes those events to us so we can see which emails are useful. We store them with a one-way code in place of your address. We do not sell or rent your address and we do not share it with advertisers.

If you unsubscribe, we keep your address marked as unsubscribed so you are not emailed again by mistake. Write to contact@homecraftblog.com and we will delete it completely.

Analytics (Google Analytics)

We use Google Analytics 4, a measurement service from Google, on this blog and on our guides site at https://homecraftblog.com. Both send data to the same Google Analytics property, so a visit that moves from one to the other counts as one visit. It shows us, in reports, how many people read the site, which pages they read, how they found us (for example a search engine, Pinterest or a link), how long they stay and roughly where they are.

When it runs, Google Analytics collects:

• the pages you view, the page that sent you here, and the time of each visit;
• interactions the tag records on its own: scrolling to the end of a page, clicks on links to other websites, file downloads, searches on this site, video plays, and starting or submitting a form (not what you type into it);
• your browser, device type, operating system, screen size and language;
• your approximate location (city, region and country), which Google works out from your IP address. Google Analytics 4 does not log or store IP addresses;
• where cookies are allowed, a random identifier in its cookies that lets it recognize a returning browser.

We do not send Google your name, email address or anything else that identifies you directly, and the tag removes email addresses from page addresses before they are sent. Google signals and ads personalization are turned off for this data, so it is not used to build advertising profiles or to choose the ads you see, and we have turned off sharing it with Google to improve Google’s own products. Google processes it for us under its data processing terms. We look at reports, not at individual visitors.

Cookies and your choice. Google Analytics stores two cookies on homecraftblog.com, _ga and _ga_4GLV5PMNQV, which last up to 2 years. Whether they are used depends on where you are:

• EEA, UK and Switzerland: only after you consent in Google’s consent message.
• Brazil and Quebec: only after you choose “Accept” in our prompt.
• Everywhere else: on unless you opt out. Choosing “No thanks” under “Your Privacy Choices” in the footer turns off Analytics cookies on this blog as well as ad personalization.

Without cookies, the tag still sends Google cookieless signals, such as that a page was viewed, with the time and your browser type, and Google uses them only for aggregated, modeled figures. To stop Google Analytics on every website you visit, install the Google Analytics opt-out browser add-on. Google explains its handling of this data in How Google uses information from sites or apps that use our services.

Advertising (Google AdSense)

We show ads from Google AdSense on our posts, topic pages and homepage. No ad code runs on our About, contact, search or legal pages.

• Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• Google and other third-party vendors may place and read cookies on your browser, or use web beacons and IP addresses, to collect information as a result of ad serving on this site. These are sent directly to your browser by the ad companies; we do not receive them or control them.
• Besides Google, other ad technology companies approved by Google may bid to show ads here. They are listed in Google’s list of ad technology providers, and in the EEA, the UK and Switzerland the consent message names each one and lets you choose.

Personalized and non-personalized ads. Personalized ads are chosen using what Google and its partners know about your browsing. Non-personalized ads are chosen from the page you are reading and your general location, but, as Google explains, they still use cookies or mobile ad identifiers for frequency capping and aggregated ad reporting. Which kind you see depends on where you are and what you choose:

• EEA, UK and Switzerland: Google’s certified consent message asks you first, and nothing personalized happens without your consent.
• Brazil and Quebec: you see non-personalized ads until you accept a prompt shown in your language.
• Everywhere else: ads may be personalized unless you opt out. A Global Privacy Control (GPC) signal from your browser counts as an opt-out.

Your choices. The quickest way to change your choice on this site is the “Your Privacy Choices” link in the footer of every page. In the EEA, the UK and Switzerland it reopens Google’s consent message, where you can withdraw or change your consent; elsewhere it opens our own opt-out. You can also:

• turn off personalized ads from Google in Google Ads Settings or My Ad Center;
• opt out of participating vendors at aboutads.info and the Network Advertising Initiative;
• in Europe, use youronlinechoices.eu.

Google explains how it uses information from sites that show its ads in How Google uses information from sites or apps that use our services, and lists its advertising cookies in How Google uses cookies in advertising.

Affiliate links

Some posts link to products on Amazon and other retailers through affiliate links (see our Affiliate Disclosure). When you click one, the retailer may set its own cookies on its own website to record that the visit came from us. Those cookies fall under the retailer’s privacy policy. Amazon reports which products were ordered and our commission; it does not tell us who you are.

Who we share information with

We share information only with the services that run the site for us, each for the purpose described above:

• Cloudflare (hosting, security, database, Turnstile, Web Analytics)
• Google (Google Analytics) and Google with the ad technology providers it works with (advertising)
• Web3Forms (delivers contact-form messages to our inbox)
• Brevo (sends our emails)
• Hetzner (the server in Germany that runs our email list and Umami analytics)

We may also disclose information if the law requires it, or to protect the site and its readers from fraud or abuse.

How long we keep information

• Messages you send us: kept in our email inbox for up to 24 months, then deleted.
• Email list: kept while you are subscribed. After you unsubscribe, only an “unsubscribed” marker stays, unless you ask us to delete it.
• Your privacy choice: stored in your own browser for 6 months, then you are asked again.
• Google Analytics: visit-level data is kept for 14 months and then deleted by Google; reports keep only totals. Its cookies last up to 2 years.
• Advertising cookies: set and kept by Google for the periods in its cookie list (for example, up to 13 months for __gads).
• Umami and Cloudflare Web Analytics: only totals are kept; they contain no personal data.

Your privacy rights

Depending on where you live, you have rights over your personal data. Because we hold very little, most requests concern the email list, a message you sent, or advertising cookies.

• EEA, UK and Switzerland: the right to access, correct, delete, restrict or object to the processing of your data, the right to data portability, the right to withdraw consent at any time, and the right to complain to your data protection authority.
• California and other U.S. states with privacy laws: the right to know what is collected, to access, correct and delete it, and to opt out of the “sale” or “sharing” of personal information and of “targeted advertising”. We do not sell personal information for money, but advertising cookies on this site may count as sharing or targeted advertising under these laws. Opt out with the “Your Privacy Choices” link or a GPC signal; in California we show a short confirmation when we detect a GPC signal. Google Analytics measures visits for us with Google signals and ads personalization turned off, so it is not used for targeted advertising. We will not treat you differently for using any of these rights.
• Brazil (LGPD) and Quebec (Law 25): ads are not personalized, and Google Analytics sets no cookies, until you opt in through the prompt shown in your language (Portuguese or French).

To use any of these rights, email contact@homecraftblog.com or use our contact page. Writing from the address you used with us helps us find your record. We answer within 30 days, or sooner where the law requires. Data held by Google is managed in the Google settings linked above.

Children’s privacy

This site is written for adults and is not directed at children under 16 (or the minimum age in your country). We do not knowingly collect personal information from children, and ads here are not targeted at children. If you believe a child has given us personal information, contact us and we will delete it.

International data transfers

Our service providers, including Google, Cloudflare, Brevo and Web3Forms, may process data in the United States or other countries whose data-protection laws differ from yours. Where the law requires it, they rely on recognized safeguards for these transfers, such as the European Commission’s standard contractual clauses, as described in their own privacy policies.

Security

The site is served over encrypted HTTPS only, and the accounts that hold your information are password-protected. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we keep what we hold to a minimum.

Links to other websites

Posts link to retailers, manufacturers and other sources. We are not responsible for the privacy practices of those websites; read their privacy policies before you give them any information.

Changes to this policy

We update this policy when the site or the law changes, and the “Last updated” date at the top changes with it. The update of October 23, 2026 adds our mailing address, a list of the services we use, retention periods, the cookies Google names for ad serving, affiliate cookies and rights under other U.S. state laws. Since October 24, 2026 the free-download form asks only for your email address, not your name. The update of October 25, 2026 adds Google Analytics, which we use on this blog and on https://homecraftblog.com, and explains how its cookies follow your privacy choice.

Contact us

Questions about your privacy or this policy? Email contact@homecraftblog.com, use our contact page, or write to: