Privacy policy

The short version

We collect what an order needs and very little else. We do not sell your personal information, we do not run advertising trackers on this site, and we honor the Global Privacy Control signal your browser can send.

Cookies this site sets

Two exist so a cart survives from one page to the next: rfd_cart_token and rfd_cart_nonce. They are set by this site, marked httpOnly so no script on the page can read them, expire after fourteen days, and carry no advertising or profiling role.

Google Analytics sets its own cookies on this domain, named _ga and _ga_ followed by a stream id. They hold a randomly generated number that lets us count a return visit as one person rather than two. They are readable only on this domain and hold nothing you typed.

There is no cookie banner. Everything above is either needed to run a cart or used to count how pages are visited, and the opt outs described under Analytics work without one.

Analytics

Two products, and both of them count how pages are used in aggregate.

Vercel Web Analytics counts page views and shows which pages people use. It sets no cookies and does not follow you between sites.

Google Analytics 4, loaded through Google Tag Manager, measures page views and basic site usage. It sets the Google cookies described above and sends that activity to Google. It is not linked to any advertising product, and we do not use it to build advertising audiences. To opt out, install Google’s browser add-on at tools.google.com/dlpage/gaoptout or block cookies for this site in your browser settings. If any of this changes, this page changes with it.

What an order collects

Your name, email address, shipping and billing address, phone number if you give one, and what you bought. Payment card details go directly to Stripe and are never held by this site. Your delivery address is passed to the warehouse that ships your rug, because otherwise it cannot reach you. Order records live in our store system and are kept for the period tax and accounting rules require.

Global Privacy Control

If your browser or an extension sends a Global Privacy Control signal, we treat it as an opt out of any sale or sharing of your personal information. Nothing on this site sells or shares it today, so the signal confirms a position we already hold rather than changing one.

Do not sell or share my personal information

We do not sell your personal information and we do not share it for cross context behavioral advertising, as California defines those terms. There is no request to submit because there is nothing to opt out of. If you want that confirmed in writing, email hello@rugsfordays.com and we will reply.

Your choices

Write to hello@rugsfordays.com to ask what we hold about you, to have it corrected, or to have it deleted. We will need enough detail to find your order, which is usually the order number or the email address you used. Deleting an order record we are required to keep for tax purposes is the one request we may have to decline, and we will say so rather than ignore it.

Children

This site is meant for adults buying rugs. We do not knowingly collect information from anyone under 16.

Changes

When this policy changes the date at the top changes with it. Anything that alters what we collect will be reflected here at the time it takes effect, not after.