Privacy Policy
Last updated: 13 October 2026. This page explains what cosmeticdecoder.com collects, why, and who else receives it.
Who runs this site
Cosmetic Decoder is an independent information site. Questions about this policy: choisunggul7@gmail.com.
Visits and tool use — Google Analytics
We use Google Analytics 4 (measurement ID G-FZXTWCRDKF) to count visits and to see how the tools are used. Google receives the page address, the page you came from, your device and browser type, and an approximate location worked out from your IP address. We also send these tool events:
- the words typed into the product search box (sent once you stop typing for about 1.5 seconds) and the number of matches;
- the product you open from the search results;
- in the batch code checker: the brand you chose and whether the code could be read — not the code itself;
- in the after-opening calculator: the number of months you chose;
- when you check a printed use-by date: the brand and the number of months between manufacture and that date;
- when you press “Report this code”: the brand.
We do not send names, email addresses or the batch codes you type to Google Analytics. Site editors who are logged in are not tracked. See the Google Privacy Policy.
Site statistics — Jetpack Stats (WordPress.com)
The site is hosted on WordPress.com, whose Jetpack Stats feature records page views. According to Jetpack’s privacy information, it collects the IP address, the WordPress.com user ID and username (if you are logged in to WordPress.com), user agent, visited URL, referring URL, timestamp, browser language and country code. We only see totals, not individual visitors. It also records page-load and resource timing (WordPress.com loads a small performance script, s0.wp.com/…/bilmur.min.js, for this), which is used in aggregate. Automattic keeps the logs that contain IP addresses for 28 days.
Reports and shared label dates
Nothing you type into the tools is sent to us unless you press one of these buttons:
- “Report this code”: the brand, rule group, code and page language. To stop abuse, a one-way hash of your IP address is kept for up to one hour to limit the number of reports.
- “Share this anonymously”: the brand, rule group, code, the decoded manufacture date, the printed use-by date you typed and the page language.
Neither contains your name or contact details. Batch codes you only check, ingredient lists you paste and dates you calculate are processed in your browser and are not stored by us.
Advertising — Google AdSense
This site shows ads from Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
- You can turn off personalised advertising in Google’s My Ad Center.
- You can opt out of other third-party vendors’ cookies for personalised advertising at aboutads.info.
- How Google uses information from sites that use its services: Google’s explanation.
Cookies
Our own code sets no cookies and uses no local storage. Google Analytics sets these cookies (Google’s default settings):
| Cookie | Set by | Expires | Purpose |
|---|---|---|---|
| _ga | Google Analytics | 2 years | Distinguishes users |
| _ga_<container-id> | Google Analytics | 2 years | Keeps session state |
If you are logged in to WordPress.com, WordPress.com uses its own cookies — see Automattic’s cookie policy.
Other services your browser contacts
- Fonts: the Pretendard font is loaded from jsDelivr, and the logo font from Google Fonts through WordPress.com (fonts-api.wp.com). These services receive your IP address and browser details when your browser downloads the font files.
- Hosting: WordPress.com, operated by Automattic — Automattic Privacy Policy.
Your choices
- Block or delete cookies in your browser settings, or use tracking protection or an ad blocker.
- Install Google’s Analytics opt-out browser add-on.
- Questions or requests: choisunggul7@gmail.com. Reports and shared dates hold no personal identifiers, so we cannot link them to a person.
Changes
If this policy changes, the date at the top of this page changes with it.