Privacy Policy

Newsletter: your email address, where you signed up from, and the dates you subscribed or unsubscribed.

Accounts: your email, a display name (optional), and either a securely hashed password or, if you use Google sign-in, basic Google profile information (name, email).

Profile (optional):anything you choose to add — avatar, bio, skills, household size, location preferences. All optional; a blank profile is fine. Some of these fields are publicly visible (see below).

Technical: IP address and request metadata, used only to prevent abuse and rate-limit forms, and essential session cookies to keep you signed in. We do not use third-party advertising or tracking cookies.

To run your account, send the newsletter (every email has a one-click unsubscribe), provide community features, protect the site and its members from abuse, and meet legal obligations.

We share data only with the vendors that operate the service: Supabase (database and authentication), Resend (email delivery), Vercel (hosting), Upstash (abuse rate-limiting), and Google (only if you choose Google sign-in). Each processes data on our behalf.

When community features launch, your profile and posts will be publicly visible, including to people without an account. Please don’t share information you wouldn’t want public — home address, a child’s identifying details, case information, or anything that could put you or someone in your care at risk.

You must be at least 13 years oldto create an account or subscribe. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us information, contact us and we will delete it promptly. People aged 13–17 should have a parent or guardian’s permission to use Rooted in Worth.

You can unsubscribe from the newsletter at any time via the link in any email. If you have an account, you can update your details or permanently delete your account and profile from your account settings. You may also request a copy of your data or its deletion by contacting us.

Passwords are hashed, data is encrypted in transit, and database access is restricted by row-level security. No system is perfectly secure, so we can’t guarantee absolute security. We keep data only as long as needed to provide the service; deleting your account removes your profile, and unsubscribing removes you from the mailing list.

We may update this policy. We’ll change the date above and, for significant changes, give notice through the site or email.

Questions or requests: privacy@rootedinworth.info. See also our Terms of Service.