Last updated October 2, 2026. Morning Sanctuary is run by Orenston (“we”, “us”). Questions or requests: hello@morningsanctuary.com.
What we collect
- What you type in. Newsletter: your email address. Quote requests: name, email, ZIP code, project type, budget, timeline and notes, plus a record of each consent you gave (the exact wording, which business it named, the time, your IP address and browser). Order requests: the details on that form. Opt-out requests: your email.
- Automatic data. Which seller link was clicked and from which page, with a time (no name or email). Our host, Cloudflare, processes your IP address, device and browser details to deliver and protect the site.
- Cookies and storage. We set no cookies and use no analytics or advertising trackers, so there is no cookie banner. The sauna configurator saves your designs in your own browser (localStorage, key
ms-builds); they never reach us. Builder videos load from youtube-nocookie.com only when you press play. Sellers you visit through our links set their own cookies under their own policies, which is how they credit a referral.
Why we use it
- To answer what you asked for: send the newsletter, pass a quote request to the builders you chose, follow up on an order request.
- To measure which pages and sellers are useful, and to keep the site secure.
- To earn affiliate commissions and referral fees, as explained on our disclosure page.
Who receives it
- Cloudflare hosts the site and our database.
- Our email provider, once chosen, to send the newsletter. We’ll name it here before the first issue goes out.
- Builders and electricians, only the ones you tick or confirm by name on a quote form. We email you a record of who received it.
- Affiliate networks and sellers receive only what their own cookies record after you click through to them.
- We never sell your information for money.
Sale, sharing and your privacy choices
We don’t sell personal information and don’t share it for cross-context behavioral advertising. Some US state laws could treat a seller’s referral cookie as “sharing”, so we give everyone an opt-out anyway: use our Your Privacy Choices page. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out automatically and record it with any form you submit.
Your rights
Wherever you live, you can ask to know or access the personal information we hold about you, correct it, delete it, or opt out of sale, sharing and targeted advertising. Residents of California (CCPA/CPRA) and of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island have these rights by law; we extend them to everyone. Email hello@morningsanctuary.com. We’ll respond within 45 days, and we won’t treat you differently for asking. If we refuse a request, you can appeal by replying to our answer, and we’ll explain the outcome within 45 days.
How long we keep it
- Quote requests, introductions and order requests: 24 months.
- Consent records: 5 years, as proof of what you agreed to.
- Newsletter: until you unsubscribe. Thirty days after you unsubscribe, we keep only your address on a suppression list so we never email you again.
- Seller link clicks: 25 months.
- Server logs: per Cloudflare’s own retention.
A daily automated job deletes records once they pass these periods.
The newsletter
If you subscribe to The Sanctuary Report, we store your email address, the page you signed up on, the time, and whether your browser sent a GPC signal. We use it only to send the newsletter. Every issue has a one-click unsubscribe link, and you can also email us to be removed.
Children
This site isn’t directed to children under 13, and we don’t knowingly collect their information. If you think a child has given us information, email us and we’ll delete it.
Visitors outside the US
The site is run from the United States. If you are in the EU, the UK or a similar jurisdiction, we process your information to fulfil your requests (contract), with your consent (newsletter, quote sharing), or for our legitimate interest in running and securing the site. You have the rights to access, correct, delete, restrict or object to processing, to data portability, and to complain to your local data protection authority. Contact us to use them.
Security and changes
We use access controls and encrypted connections, and keep only what we need. No system is perfectly secure. If we change this policy, we’ll update the date at the top and, for material changes, say so on the homepage before they take effect.