Privacy Policy
Last updated June 2026
The short version
I collect as little about you as I possibly can. No tracking cookies, no selling your information, no creepy follow-you-around ads. If you never sign up for anything, I never get your name or your email. That's the whole shape of it. The rest is just me spelling out the details.
This is a plain-language policy for a small solo blog, kept current as the setup changes. Effective June 2026.
What I actually collect
Two things, and that's it. Your email address, but only if you type it in to grab a free printable or join the list. And anonymous traffic counts from privacy-friendly analytics, the kind that can't tell who you are. No name, no address, no phone number, no payment details, nothing else. If you just read and never sign up, I have no personal data about you at all.
Why I have it and how I use it
Your email does three small jobs: it delivers the freebie you asked for, it lets me send the occasional update when there's something worth your inbox, and it's how I write you back if you message me. The analytics tell me which pages people actually read, so I can make more of what helps and quietly retire what doesn't. That's the whole list. I don't use your data for anything you didn't come here for.
Your email, if you give it
I keep your email with my email provider, a service I use to send the list and the freebies. I don't sell it. I don't share it. I don't trade it. And you can leave whenever you want. Every email has an unsubscribe link at the bottom, one click, no hard feelings.
Analytics, the polite kind
I use Umami, a privacy-friendly analytics tool, to see which pages people actually read. It uses no cookies and collects no personal data. What I get is anonymous, lumped-together counts, like "the playdough post had a good week." I can't see you. There's no tracking you from site to site.
The companies that help me run this
Running a blog takes a few outside services. Here's everyone who touches any of it, and why:
- My email provider stores your email and sends the list and the freebies. (I'll name the exact one here once it's locked in.)
- Umami counts page views without cookies or personal data.
- Etsy only when you click through to my shop. From there you're on their site under their rules, and they handle any purchase.
- My web host serves the pages and keeps standard server logs, the ordinary plumbing every website runs on.
How long I keep it
Your email sticks around as long as you're on the list, then it's gone soon after you unsubscribe or ask me to delete it. The analytics counts are anonymous and aggregated, so there's no "you" in them to hold onto. I don't keep what I don't need.
Cookies (or the lack of them)
No tracking cookies. No advertising cookies. That's why you won't find one of those annoying cookie banners here, because there's nothing to consent to.
The one thing that does get saved in your browser is whether you picked light or dark mode. That lives in your browser's localStorage, on your device, so the site remembers your choice next time. I never see it and it never leaves your machine.
No ad tracking, full stop
There's no Pinterest tag, no Facebook pixel, no ad network hiding in the code. I'm not building a profile on you to sell to anyone. Pinky promise, and the page source backs me up.
About kids
This whole site is written for the grown-ups: parents, caregivers, teachers, the tired and the hopeful. It is not directed to children under 13, and I don't knowingly collect anything from them. If you think a child sent me their info by mistake, email me and I'll delete it.
When you click away
Some links here send you off to Etsy, Pinterest, or another site. Once you land there, you're playing by their privacy rules, not mine. Worth a peek at their policies if it matters to you.
Your choices
Your data, your call. You can unsubscribe from any email in one click, or you can ask me to delete your email from my list entirely. Either way, email me at hello@rosyandhush.com and I'll take care of it.
If you're in the EU or UK
Under the GDPR, you get a clear set of rights, and I'm happy to honor them. A couple of quick basics first, then the rights.
The person responsible for your data (the controller, in legal terms) is Nora, who runs this site. There's no big company behind it and no data protection officer, because it's just me. You can reach me any time at hello@rosyandhush.com.
What lets me hold your data in the first place is called a legal basis. I rely on two. For marketing email, it's your consent, given when you sign up and withdrawn the moment you unsubscribe. For the cookieless, privacy-friendly analytics, it's legitimate interest, since it's a light, anonymous way to understand what's working without tracking anyone.
Your rights under the GDPR include the right to:
- ask what data I hold about you and get a copy (access);
- fix anything that's wrong (rectification);
- have your data deleted (erasure);
- get your data in a portable form to take elsewhere (portability);
- object to a particular use, like the analytics;
- withdraw your consent for marketing email whenever you like.
One note on where your data sits: my email provider and host may store it on servers in the United States, so signing up means your email may cross borders. I pick services that handle international transfers with the proper safeguards in place. To use any right above, just email me and I'll sort it.
If you're in California
The CCPA and CPRA give California residents their own set of rights, and the headline one is the simplest to state.
Do Not Sell or Share My Personal Information. I do not sell or share your personal information, full stop. There's no opt-out form to hunt for, because there's nothing to opt out of.
The only category of personal information I collect is the email address you hand over, plus the anonymous analytics that don't identify you. As a California resident you have the right to know what I collect, to ask me to delete it, to correct it, and to opt out of any sale or sharing (already covered, since I do neither). Email me to use any of these.
If this changes
If I ever change how any of this works, I'll update this page and bump the date up top so you can see it's fresh. Anything big, and I'll say so in an email too.
Questions about any of it? The contact page is right there, and there's more plain talk about money over on the disclosure page.