Privacy Policy
Last updated: 2026-05-10 (revised)
Dennis Mojado (“I”, “me”) respects your privacy. This page explains what I do and don’t collect when you visit shop.mojado.com, and what rights you have.
What I collect
Almost nothing.
I don’t run analytics scripts, advertising trackers, or third-party tracking pixels on this site. I don’t set cookies. I don’t ask you to sign in. I don’t keep a database of visitors.
The only situation where you give me personal information is when you fill out the contact form. In that case, I receive whatever you put into the form (your name, your email address, and your message), along with your IP address, which Cloudflare attaches to the request and I include in the email so I can recognize abuse patterns.
How I use what you give me
If you submit the contact form, I use the name, email, and message to reply to you. That’s it. I do not add you to a mailing list. I do not sell, rent, share, or trade your information. I do not use it for marketing.
Affiliate and outbound links
Product pages on this site link to external destinations. Three categories:
- Amazon affiliate links - most “Buy on Amazon” buttons. As an Amazon Associate, this site earns from qualifying purchases. See the dedicated Amazon section below.
- Other affiliate links - labeled with the same disclosure framing on the product page. Same general behavior as Amazon: a referral cookie is set on the destination, the partner’s privacy policy applies once you click.
- Direct (unmonetized) links - straight to a manufacturer or retailer, no commission flows to me, the link is a personal recommendation.
In all three cases, once you click an outbound link you leave shop.mojado.com and the destination site’s privacy practices take over. I have no control over and no visibility into what those sites collect.
Amazon
Most outbound links here go to Amazon. Once you click an Amazon link, you are on Amazon’s domain and Amazon’s full privacy practices apply. In practice this means:
- Amazon sets a referral cookie on its own domain that ties the visit to the Mojado affiliate tag (
ad6dm-20). This is how qualifying purchases get attributed. - Amazon also sets its own session, advertising, and personalization cookies, regardless of whether you arrived via an affiliate link or directly. These cookies persist across Amazon sessions and tie into Amazon’s advertising network and personalization profile.
- Amazon may use the referrer header to know that the visit came from shop.mojado.com.
- I receive only aggregate commission summaries from Amazon: which products earned commissions, in what quantities, on what dates. I never see who clicked, who bought, what they bought, or any personal information about Amazon shoppers.
- I do not have access to Amazon’s customer data, order data, or analytics.
If you want to use this site without giving Amazon any referral data, you can copy the product name and search for it directly on Amazon - the affiliate cookie won’t be set and I won’t earn commission, and the visit is otherwise indistinguishable from any other Amazon visit.
Amazon’s privacy notice (the comprehensive one): amazon.com/privacy. Amazon’s interest-based ads opt-out: amazon.com/adprefs.
Other product sites
Where a product page links to a non-Amazon retailer, manufacturer, or partner - including direct-to-manufacturer sites and any future affiliate partners - that destination has its own privacy practices, which may be very different from this site’s and may include analytics, advertising trackers, third-party pixels, session recording, fingerprinting, retargeting cookies, or other practices that this site does not engage in.
I include these links because I personally use or recommend the products, not because I endorse the destination’s privacy posture. Some of these sites are known to be invasive in ways I would not approve of; I cannot vouch for the practices of any third-party site I link to. Before completing a purchase on any third-party site, review that site’s privacy policy.
If a partner offers a coupon code, the code itself is not personal information and using it does not identify you to me - it is just a string that the destination site applies at checkout.
Cookies and tracking
I do not set cookies for tracking, analytics, advertising, or personalization, and I do not embed tracking pixels.
Cloudflare, which sits in front of this site to protect it from abuse, may set short-lived strictly-necessary security cookies on your browser as part of its anti-bot and anti-DDoS protection. The most common are __cf_bm (a roughly 30-minute bot-management cookie) and cf_clearance (set when you pass a security challenge). These are issued by Cloudflare, not by me. I do not read them, and they exist only to confirm that you are a real visitor rather than an automated abuser. Turnstile, used on the contact form, may also set similar short-lived cookies for the same purpose. You can clear these cookies from your browser at any time; if you do, Cloudflare may simply re-issue them on your next request.
Third parties
I do not use third-party advertising or analytics services. Two services are involved in delivering this website (outbound product destinations are covered separately above):
Cloudflare hosts the site and protects it from abuse. Cloudflare receives requests on my behalf and may log standard request data (IP address, browser, TLS fingerprint, referring URL) for its own security and reliability operations. Edge logs are typically retained for a few hours, though Cloudflare may retain longer-term records for security-event analysis. Cloudflare is a US company subject to US legal process. Cloudflare also runs a bot-detection tool called Turnstile on the contact form; Turnstile briefly analyzes browser characteristics (canvas, WebGL, audio APIs, TLS fingerprint) to determine whether you are a real person. I don’t see or store that data; it stays with Cloudflare. See Cloudflare’s privacy policy at cloudflare.com/privacypolicy.
Resend delivers the email sent from the contact form to my inbox. Your name, email, message, and IP address pass through Resend to reach me. Resend does not retain message content for marketing. See Resend’s privacy policy at resend.com/legal/privacy-policy.
Aggregate analytics
I may look at aggregate traffic statistics in my Cloudflare dashboard - things like total visits, country of origin, and top pages. This information is aggregated and does not identify any individual visitor. I do not review individual visitor data.
Children’s privacy
This site is not directed at children under 13, and I do not knowingly collect any personal information from them.
Your rights
Depending on where you live, you may have rights under privacy laws such as the EU GDPR, the California Consumer Privacy Act (CCPA/CPRA), or similar laws in Virginia, Colorado, Connecticut, Utah, and elsewhere. These typically include the right to know what personal data is held about you, to correct it, to have it deleted, or to opt out of its sale.
In practice, given how little I collect:
- What data do you have on me? If you’ve never sent a contact form message, I have nothing on you. If you have, I have a copy of that message in my email inbox.
- Delete my data. If you’ve never contacted me, there’s nothing to delete. If you have, send a request via the contact page and I’ll remove your message from my inbox.
- Don’t sell my data. I don’t sell anyone’s data, and I never have.
- Access / portability. If you’ve sent a message and want it back, ask and I’ll send it. I am not obligated, however, to honor access requests that are manifestly unfounded or excessive, or that concern messages I consider abusive, offensive, harassing, frivolous, vexatious, spam, or otherwise sent in bad faith - and in those cases I reserve the right to block the sender. Spam in particular rarely reaches me: the contact form requires passing a Cloudflare Turnstile bot check, and anything that slips past could be discarded on arrival by spam filters before I see it, leaving nothing on my side to return.
Changes to this policy
If I change anything here, I’ll update the “Last updated” date at the top.
Contact
Privacy questions: use the contact page and select “Something else” as the purpose.