Privacy

The short version

This website does not ask you for anything unless you choose to give it. There is no account to make, no newsletter, no comments, and no cookies. If you never email me and never pay for a project, I never learn anything about you as a person.

Two things happen automatically, and I would rather name them than pretend otherwise. My host keeps standard server logs that include IP addresses, the way every web host does. And I use a cookieless analytics tool that counts page views in aggregate. Neither one builds a profile of you, and I never use either to work out who anyone is.

Two more things happen only if you start them: emailing me, and paying for a project. Payments are handled by Stripe on Stripe’s own page, so your card details never touch this website.

Everything below is a longer, more specific version of those paragraphs.

Who I am

I am Nicole Porter. I work as a user-generated content creator for family-focused consumer brands under the name MamaFinds, based in Mesa, Arizona. I am a sole proprietor, which means there is no company behind this site. There is me.

This site, mamafinds.org, is a portfolio and marketing site. Its job is to show brands the work I do so they can decide whether to hire me. It is not a shop, a community, or a service you log into.

You can reach me at themamafinds@gmail.com. That address is the answer to almost every question on this page.

What this site does not do

It helps to start with the absences, because most privacy policies are mostly about things this site does not have.

There are no user accounts and no logins. There are no comments, reviews, or uploads. There is no newsletter and no email signup, so there is no mailing list you could end up on.

There is one page where you can pay for a project, and it hands you over to Stripe to do it. No card number, expiry date or security code is ever entered on this website or passes through it — those go straight to Stripe on their own page. What I get back is the fact that a payment succeeded, the amount, the email address you gave Stripe, and the note about what the payment was for.

There are no advertising or marketing trackers. No Google Analytics, no Facebook or Meta pixel, no Google Ads tags, no retargeting, no session recording, and no A/B testing tools. Nobody is buying ad space here and nobody is following you off this site.

The contact form does not send me anything

This is the part that surprises people, so I want to be precise about it.

The contact form on this site is not really a form in the usual sense. When you fill it in and press the button, nothing is sent to my website. Instead, the button builds a mailto: link, which opens your own email program with a message already typed out for you, addressed to me. You can read it, change it, or close it without sending. Until you press send in your own email app, nothing has gone anywhere.

That means my site never receives, transmits, or stores what you type into it. There is no server behind the form and no database sitting underneath this site waiting to catch it. If your computer does not have an email program set up, the button may appear to do nothing at all, which is worth knowing so you can just email me directly instead.

What happens when you do email me

Once you actually send that email, it lands in my inbox at themamafinds@gmail.com like any other email. At that point I have whatever you chose to tell me: your name, your email address, the name of your brand if you mentioned it, and whatever you wrote.

I read it and I reply to it. That is the whole purpose. I do not add you to a mailing list, because I do not have one. I do not pass your email on to anyone else, and I do not use it to send you anything you did not ask for.

Your message lives in my email account the way ordinary correspondence does, so I can find the thread again later if we end up working together or if you write back. I am not going to promise you a formal deletion schedule I would not actually keep to. What I will say honestly is this: if you would rather I did not keep your email, tell me and I will delete it.

Analytics: what I can and cannot see

I use Vercel Analytics on this site. It is cookieless, which means it does not put anything on your device, and it does not follow you to other websites. It does not build a profile of you and it does not connect what you did here with what you did anywhere else.

What it gives me is aggregate: how many people looked at a page, which pages get read and which get skipped, an approximate location for the visit, whether people arrive from Instagram or from a search, and broad technical details like browser, operating system, and whether the visit came from a phone or a desktop. The location is recorded down to city level rather than a precise position.

To avoid using cookies, Vercel turns details of the incoming request — including the IP address and browser — into a scrambled code that cannot be turned back into the original. That code is reset every 24 hours, so it does not follow you from one day to the next.

I use this for one thing: working out whether the site is doing its job. I cannot see your name, your email, or your identity, and I have no way to look at a page view and connect it to a person. I would rather describe this accurately than claim it involves no data at all, because an approximate location and a browser type are still information about a visit, even when they are not tied to a name.

Server logs kept by my host

This site is hosted by Vercel. As part of serving pages, Vercel keeps standard server request logs, and those logs include visitors’ IP addresses along with things like which page was requested and when.

Every website on the internet works this way. A server cannot send a page back to you without knowing where to send it. Vercel keeps these logs for security and for keeping the site running, and Vercel is acting as my service provider when it does.

I do not collect IP addresses myself and I do not use them to look up who anyone is. There is a logs screen in my hosting account that I can look at, kept on a short retention window, but I cannot pick a person out of it and I cannot delete a single visit from it. I mention all this because leaving it out would make this page a nicer story than the truth, and I would rather it be true.

No cookies, which is why there is no cookie banner

This site sets no cookies of its own. It also does not use localStorage or sessionStorage, so nothing is stashed in your browser between visits. The analytics I use is cookieless, and there are no advertising or tracking cookies here because there is no advertising or tracking here.

So there is no cookie banner. Not because I have skipped one, but because there is genuinely nothing for you to consent to. A pop-up asking your permission to set cookies would be describing a website other than this one.

One honest exception: if you go through to pay, Stripe’s payment page is Stripe’s own site, and they use cookies there for security and fraud prevention. That is on their domain and under their policy, not mine, and it only happens if you choose to start a payment.

In the same spirit: the fonts on this site are stored on my own site and served from it. They started life as Google Fonts, but they are built into the site itself, so your browser never makes a request to Google to load them. The images are served from this site’s own domain, and the videos are ordinary MP4 files hosted here rather than YouTube or Vimeo embeds, so watching one does not hand you off to a video platform.

If you pay for a project

Payments go through Stripe, which is a payment processor used by a very large number of businesses. When you press a pay button, you are sent to a page hosted by Stripe. You enter your card details there, on their page, not mine.

This matters for your privacy in a specific way: your card number never touches my website, is never sent to my server, and is never stored by me. I could not show it to you if you asked, because I have never had it.

What comes back to me is the outcome: that a payment succeeded, how much it was for, the email address you gave Stripe, the billing name and country Stripe collected, and the reference you typed saying what the payment was for. I use that to know who paid, for what, and to do the work.

Stripe is acting as my payment processor, and Stripe also handles your information under its own privacy policy as part of running the payment and preventing fraud. If you want the detail of what Stripe does with it, their privacy policy is the right place to read, because that part is theirs rather than mine.

I keep records of payments because I have to — that is ordinary business bookkeeping and tax record-keeping, and I cannot delete a record of a payment on request the way I can delete an email.

The link to my Instagram

Apart from the payment hand-off to Stripe described above, there is one outbound link on this site, and it goes to my Instagram profile. It is an ordinary hyperlink. There is no Instagram embed, widget, or script on this site, so nothing is loaded from Instagram and nothing about your visit is sent to them unless you click.

If you do click it, you leave my site and arrive on theirs. From that point Instagram’s own privacy policy and terms apply, not mine. I do not control what Instagram collects, and I do not receive anything from them about who followed the link.

I do not sell or share your information

I do not sell anyone’s personal information. I do not share it with advertisers, data brokers, or marketing partners, and I do not trade it or rent it. There is no arrangement of that kind here and there never has been.

The only outside companies involved at all are the ones described above: Vercel, which hosts this site and provides the analytics; Google, which runs the email account where messages you send me arrive; and Stripe, which processes payments if you make one. They are service providers, doing the ordinary work of keeping a site online, delivering email and taking payments. I am naming them rather than saying I never involve anyone else, because that would not be accurate.

On Do Not Track: some browsers can send a Do Not Track signal. I do not track visitors over time or across other websites, so there is nothing here for that signal to switch off. No other company is collecting information about your activity across different websites through this site, because there are no third-party ad tags, pixels, embeds, or scripts on it to do that.

Your choices, and how to use them

I want to be straight with you about what I can actually offer here, because I would rather do a small thing properly than promise a process I do not run.

I do not have a formal privacy request system, a portal, or a compliance department. What I have is an inbox. If you email me at themamafinds@gmail.com, I will tell you what I hold about you, which in practice means the emails you have sent me. If you ask me to delete them, I will delete them and tell you when it is done. If something in what you sent me is wrong and you want it corrected, tell me and I will fix it.

There are things I genuinely cannot do, and it is only fair to say so. I cannot pick you out of the analytics, because it is aggregated and nothing in it points to a person. I cannot find your particular visit in my host’s server logs or remove it from them. If you would prefer to visit without any of that, browser privacy settings, a VPN, or simply reading the site without emailing me all work.

The simplest way to exercise any of this is to email me and say what you want. I read my own email and I answer it.

Children

This site is not directed at children. It is a business portfolio aimed at brand marketers who are deciding whether to hire me.

There is no signup, no account, and no form that sends anything to me, so there is nothing here for a child to hand over. The only things that happen automatically are the aggregate analytics and the host’s server logs described above, and they happen the same way for every visitor without anyone being asked for information.

My own four children appear in some of the content I create. That is my work, and it is a different subject from what this page is about. It is not information collected from anyone visiting this website.

Where this site is operated from

I run this site from Arizona, in the United States, and I work mainly with US brands. The site is written in English, prices nothing, ships nothing, and is not aimed at visitors outside the United States.

Anyone anywhere can reach it, because that is how the web works. But I am not going to write a section here claiming to run European or UK data rights procedures that I do not actually have in place. What I can tell you is what is on this page: almost nothing is collected, nothing is sold or shared, and you can email me about any of it.

Changes to this page

If how the site works changes, I will change this page to match. Any update takes effect when it is posted here, and the date near the top tells you which version you are reading.

There is no mailing list and there are no accounts, so there is nobody for me to notify. If it matters to you, that date is the thing to check.

If I ever add something that genuinely collects information from visitors — a newsletter, a real contact form that posts to a server, an embedded video — this page gets rewritten before that goes live rather than after.

One honest caveat

I wrote this myself, and I am not a lawyer. What it does is describe how my website actually works today, as accurately as I can, based on what is really running on it. It is a plain description, not a legal opinion.

If you are a brand whose legal or procurement team needs something more formal, or if you spot something here that does not match what you see on the site, email me at themamafinds@gmail.com and I will look at it.