Privacy Policy

1. Who we are

Raising Intentionally (the "Site") is a personal blog and free Montessori-inspired baby development resource operated by Kristen Garibay ("we," "us," "our"), based in North Carolina, USA. The Site includes the marketing pages at raisingintentionally.com and the member portal at app.raisingintentionally.com.

2. Scope

This policy explains what personal information we collect from visitors and registered account holders, how we use it, and the choices you have. By using the Site or creating an account, you agree to this policy.

3. Information we collect

Information you give us:

• Your email address (required to create an account or subscribe to the newsletter).
• Your password, stored only as a salted scrypt hash. We never see or store your plain password.
• A display name. You can change this at any time in the portal; the default is derived from the local part of your email.
• Your baby's age in months, if you choose to add it. This is used to tailor content and is never tied to a child's identity.
• Milestones you mark as reached, and the date you mark them.
• Messages you send through the contact form.

Information collected automatically:

• Your IP address and browser user agent at the moment of newsletter consent or account creation, for spam prevention and proof of opt-in.
• Basic request logs from our hosting provider (Cloudflare).
• A theme preference cookie (light or dark) stored on your device.

We do not use third-party advertising trackers, analytics pixels, or browser fingerprinting tools.

4. How we use your information

• To deliver the resources you ask for, including the newsletter, password reset emails, and email verification.
• To let you sign in to and use the portal.
• To protect the Site from spam and abuse, using Cloudflare Turnstile and rate limiting.
• To respond to inquiries you send us.
• To comply with applicable legal obligations.

5. Email

If you opt in to the newsletter, we will email you about new posts and related content. Every email contains a one-click unsubscribe link. We use Resend as our email delivery provider; your address passes through their systems only to deliver mail.

6. Cookies and similar technologies

We use only first-party cookies that are necessary for the Site to function, including session, anti-CSRF, and theme preference cookies. We do not use cookies for cross-site tracking or advertising.

7. Service providers

We share limited information with vendors who help us run the Site:

• Cloudflare, for hosting, database, and anti-bot challenges.
• Resend, for transactional and newsletter email delivery.

These vendors are contractually limited to processing data on our behalf.

8. Children's privacy

The Site is intended for parents and caregivers who are at least 18 years old. We do not knowingly collect personal information directly from children under 13. If you add your child's age in months to your account, that information is associated with your account, not with your child as an identifiable individual. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Your choices and rights

• You can view and update your account details and your baby's age inside the portal at any time.
• You can unsubscribe from the newsletter using the link in any email.
• You can request deletion of your account by reaching us through the contact form. We will remove your account data within 30 days, except where we are required to retain certain records (such as proof of newsletter consent for as long as you remain subscribed).

If you are a resident of California, the European Economic Area, the United Kingdom, or another jurisdiction with applicable privacy laws (such as the CCPA, GDPR, or UK GDPR), you may have additional rights, including the right to know what personal information we hold about you, the right to correct or delete it, and the right to opt out of "sales" of your information. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact us through the contact form. We will not discriminate against you for exercising any privacy right.

10. Data retention

We keep account information for as long as you maintain an account. Newsletter subscription records are kept while you are subscribed and for a reasonable period afterward to honor your unsubscribe request. Anti-spam metadata such as the IP address you used at signup is kept for up to twelve months.

11. Security

We use industry-standard safeguards, including hashed passwords (scrypt), HTTPS encryption in transit, request-origin and CSRF checks, and rate limiting. No system is perfectly secure; please use a strong, unique password and contact us if you suspect unauthorized access to your account.

12. International users

We operate from the United States, and the Site is hosted on globally distributed infrastructure. If you access the Site from outside the United States, you understand that your information may be processed in the United States and other countries.

13. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date above and, for account holders, notify you by email or in-portal notice. Continued use of the Site after the change means you accept the updated policy.

14. Contact

Questions or requests about this policy can be sent through our contact form.