Effective date: November 13, 2026
Summary
- UGG Review (uggreview.org) is an independent community site about UGG® footwear. It is not affiliated with, endorsed by or sponsored by Deckers Brands, which owns the UGG brand.
- When you post a review, comment or counterfeit report, your display name, text and photos are public. Reports become public only after a moderator approves them. An email address is optional and is never shown publicly.
- To prevent spam and abuse, we keep the IP address, browser user agent and approximate location recorded when you post.
- We measure visits with our own first-party analytics. We do not use third-party advertising or analytics trackers, we never sell your information and we never use it for advertising.
- Our hosting provider, Cloudflare, processes data on our behalf.
- You can opt out of visit analytics on this page, delete your own posts from the browser you posted with, and contact us at [email protected] about anything in this policy.
Who we are
UGG Review is run by a small independent team. In this policy, "UGG Review", "we", "us" and "our" mean the operators of uggreview.org. We decide how personal information collected through the site is used, which makes us the "controller" of that information under European data protection law.
This policy covers the website at uggreview.org and its subdomains. It does not cover other websites we link to, including ugg.com, online marketplaces or retailers. Those sites have their own privacy policies.
Information you provide when you post
You can post reviews, comments and counterfeit reports without creating an account. When you post, we store the following:
| Information | Who can see it | Why we keep it |
|---|---|---|
| The display name you choose | Public, shown with your post | To show who wrote the post |
| Your email address (optional) | Never shown publicly; available only to our moderators | Only to contact you about your post, for example with a moderation question or about a removal request |
| Your text and photos | Public. Counterfeit reports become public only after a moderator approves them | To publish your contribution |
| Your IP address, browser user agent and approximate location at the time you post | Moderators only | To prevent spam, abuse and fraud, and to enforce our Community Guidelines |
Photos
Before a photo is uploaded, your browser resizes it and re-encodes it. This normally removes metadata embedded in the original file, such as the GPS location where the photo was taken. It does not change what is visible in the picture, so before you upload, check that the image does not show faces, addresses, order numbers, shipping labels or anything else you would not want to publish.
Deleting your own posts
When you post, your browser keeps a small record in its local storage (under names that begin with ugg_own_) that lets you delete that post later from the same browser. If you clear your browser data or switch devices, email us and we will help.
Bot protection
Our forms use Cloudflare Turnstile to tell people apart from automated bots. Turnstile processes technical signals such as your IP address and browser characteristics for that purpose. Cloudflare describes this in its Turnstile Privacy Addendum.
Visit analytics
We measure how the site is used with our own first-party analytics, which runs on our hosting provider's infrastructure. We do not use third-party analytics services, advertising pixels or other third-party trackers. Unless you opt out (see below), we record the following about visits:
- What you view: the pages you view and when, how long you stay on each page and how far down you scroll.
- How you arrived: the referring page or search engine, the search keyword when the referrer includes it, campaign tags in the link you followed (
utm_parameters) and advertising click IDs that an ad platform added to that link. - Your device and browser: device type, browser and operating system with their versions, the full user agent string, screen and window size, language setting and time zone.
- Network and approximate location: your IP address; an approximate location that our hosting provider derives from the IP address (country, region, city, postal code and approximate coordinates); your network (its ASN and organization name); and the Cloudflare data center that handled your request.
- Identifiers: the random visitor and visit IDs stored in the cookies described below.
A location derived from an IP address is only an estimate and can be off by many miles. It is not your device's GPS location, which we never request.
We use this information to understand which pages are useful, find and fix problems, improve the site and detect abuse. We never sell it, never use it for advertising and never share it with advertisers or data brokers.
Cookies, local storage and opting out
We use a small number of first-party cookies and browser storage entries:
| Name | Type | Purpose | How long it lasts |
|---|---|---|---|
ugg_vid | Cookie | A random visitor ID used by our visit analytics to recognize returning browsers | 1 year |
ugg_sid | Cookie | A random visit (session) ID that groups page views into one visit | Expires after 30 minutes of inactivity |
ugg_fresh | Cookie | Set right after you post so that you see your new review or comment immediately instead of a cached copy of the page | 60 seconds |
ugg_adm | Cookie | Keeps a moderator signed in. It is set only for moderators | The moderator's login session |
ugg_own_* | Local storage | Remembers the posts you made in this browser so you can delete them | Until you clear your browser data |
ugg_helpful_* | Local storage | Remembers which reviews you marked as helpful, so the button shows your vote | Until you clear your browser data |
ugg_cookie_ok | Local storage | Remembers that you dismissed the cookie notice | Until you clear your browser data |
ugg_optout | Local storage | Remembers that you opted out of visit analytics | Until you clear your browser data |
Cloudflare, our hosting provider, may also set strictly necessary security cookies, for example when it checks whether traffic comes from a bot. These are described in Cloudflare's cookie policy. We do not use advertising cookies.
How to opt out of visit analytics
Use the control above to turn off visit analytics in this browser. Your choice is saved in local storage, so it applies only to this browser and device; if you clear your browser data or use another browser, you will need to opt out again. You can also block cookies for uggreview.org in your browser settings: when your browser reports that cookies are disabled, our pages do not send visit analytics at all.
Opting out does not change how posting works. If you post, we still record the abuse-prevention information described above, and Cloudflare still processes the technical data it needs to deliver pages and protect the site. If you block local storage, you will not be able to delete your posts from your browser; email us instead.
How and why we use information
We use the information described in this policy to:
- publish and display reviews, comments, photos and approved reports;
- moderate content and enforce our Community Guidelines and Terms of Use;
- contact you about your post, if you gave us an email address;
- prevent spam, fraud, abuse and attacks on the site;
- understand how the site is used so we can fix problems and improve it;
- respond to your requests and to complaints about content; and
- comply with the law and protect the rights and safety of our users, the public and UGG Review.
We do not use personal information for advertising, we do not build advertising profiles, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
Legal bases (EEA and UK)
Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:
- Providing what you ask for: publishing your post and handling your requests.
- Legitimate interests: running, securing and improving a community website, including visit analytics, abuse prevention and moderation. We have weighed these interests against your rights, and you can object at any time (see "Your rights and choices").
- Consent: where you choose to give us something optional, such as your email address. You can withdraw consent at any time by emailing us.
- Legal obligations: where we must keep or disclose information by law.
Who processes or receives information
Everyone who visits the site
Display names, review and comment text, photos and approved reports are public. Search engines may index them, and other people may copy or share them. Please post only what you are comfortable making public.
Our service providers
Cloudflare, Inc. provides our hosting, content delivery network, database, file storage and Turnstile bot protection, and it derives the approximate location information described above. Cloudflare processes this data on our behalf and according to our instructions. See Cloudflare's privacy policy for details.
If you email us, your message and email address are also handled by the email service provider we use for [email protected]. We do not use any third-party analytics, advertising or tracking services.
Legal reasons
We may disclose information if we believe in good faith that the law requires it, or that it is necessary to respond to a valid legal request, to investigate or prevent fraud and abuse, or to protect anyone's rights, property or safety.
If the site changes hands
If UGG Review is transferred to a new operator, the information we hold may be transferred with it. This policy would continue to apply to information collected under it unless you are told about a new policy and, where the law requires, give your consent.
What we never do
We do not sell personal information, and we do not share it for cross-context behavioral (targeted) advertising, as those terms are used in California privacy law.
International transfers
Cloudflare runs a global network, so your information may be processed in countries other than the one you live in, including the United States. Cloudflare states that it relies on the EU-U.S. Data Privacy Framework (including its UK and Swiss extensions) and on standard contractual clauses for international transfers.
How long we keep information
| Information | How long we keep it |
|---|---|
| Page-level visit logs (each page view and its details) | 90 days |
| Visit sessions (a record of each visit) | 13 months |
| Aggregated statistics that do not identify you, such as page-view totals | Indefinitely |
| Posts (reviews, comments and reports), including their photos, the optional email address and the abuse-prevention data attached to them | Until you or a moderator delete the post |
When a post is deleted, its text and photos are removed from the site and our storage, and the abuse-prevention records attached to it are deleted with it. Copies may remain for a short time in our hosting provider's routine backups until those backups expire. Emails you send us are kept for as long as we need them to handle your request.
Security
The site is served only over encrypted HTTPS connections, and access to moderation tools and non-public data is limited to our moderators. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect the information we hold.
Your rights and choices
- Delete your own posts from the browser you posted with, or email us to delete them for you.
- Opt out of visit analytics with the control in the "Cookies, local storage and opting out" section.
- Ask us for a copy of the personal information we hold about you, or to correct or delete it.
- Object to processing based on our legitimate interests, or ask us to restrict it.
- Withdraw consent you have given, for example for us to keep your email address.
Depending on where you live, these rights come from laws such as the EU and UK General Data Protection Regulation or US state privacy laws, such as California's. Where the GDPR applies, you also have the right to data portability and the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office). We will not treat you differently for exercising your privacy rights.
To make a request, email [email protected] with a link to the post or a description of the information involved. Because we do not have user accounts, we may ask you to confirm that you control the email address attached to a post, or for other details that only its author would know, before we act on a request. We aim to respond within one month.
Children
UGG Review is not directed at children under 13, or at children under 16 in the European Economic Area and the UK, and they should not post on the site. We do not knowingly collect personal information from children in those age groups. If you believe a child has posted personal information, email us and we will delete it.
Changes to this policy and how to contact us
We may update this policy when the site or the law changes. We will post the new version on this page with a new effective date, and if the changes are significant we will also announce them on the site.
Questions, requests or complaints about privacy: [email protected].
