Privacy Policy

1. About this policy

This policy explains what information Nibble & Nurture ("we", "us") collects through this website at mycuratedhaven.com, why, and what choices you have. You can read and print our free recipes without giving us any personal information.

2. Information we collect

• Your email address, if you sign in. An account is optional. We send a one-time code to your email to sign you in. There is no password.
• Recipes you save. If you save a recipe, we store which recipe you saved and when.
• Emails you send us. If you email support, we keep the message and your address so we can reply.
• How you use the website. Pages you visit, what you click, and recordings of your visits. See section 4.
• Purchase records, if you buy a recipe collection. What you bought, when, the amount and the email you paid with. See section 5.
• Basic request data. Like any website, each request sends your IP address and browser type to our hosting provider, which uses them to deliver the site and protect it from abuse.

The website does not ask for your child's name, birth date or health information, and it does not show advertising.

3. How we use it

• To sign you in and keep your saved recipes private to you.
• To take payment for a collection you buy, give you access to it, and handle payment disputes (chargebacks).
• To answer support requests.
• To understand how people find and use the website, for example which recipes are read, saved and printed and where visitors get stuck, so we can improve it.
• To keep the website secure and working.

We do not sell your personal information, and we do not send marketing email.

4. Cookies, browser storage and analytics

• Sign-in cookies. If you sign in, our authentication provider sets cookies that keep you signed in. The website needs them for accounts, saved recipes and the collections you buy.
• Checkout cookie. If you start a purchase without signing in, we set a cookie (mch_guest) holding a random identifier for 30 days, so tapping buy again returns you to the same checkout instead of starting a second one.
• Analytics. We use PostHog to measure how the website is used. It stores a random identifier in a cookie and in your browser storage, and records the pages you visit, the links and buttons you click, the website that sent you, and your device and browser type. Our own code also stores a browser and session identifier (mch_browser_id, mch_session_id) and the campaign name from a Tiny Soho link you followed (mch_campaign_attribution).
• Session recordings. PostHog records how pages look and respond while you use them, so we can see where the website is confusing. Anything you type is hidden in the recording. We do not record the sign-in, account or checkout pages.
• If you sign in. Your analytics are linked to your account and email address, so we can understand how signed-in parents use saved recipes. Signing out unlinks the browser.

5. Purchases

Stripe takes payment on its own checkout page. It collects your email address and card details, and its own privacy policy applies to what you give it there. We never receive your full card number.

From Stripe we receive your email address, what you bought, the amount, whether the payment succeeded, was refunded or was disputed, and Stripe's references for the payment.

If you buy without signing in, we send a one-time code to the email you gave Stripe. Entering it creates an account for that email, if you do not have one, and adds the collection to it.

We keep purchase records to give you access to what you bought, to handle payment disputes (chargebacks), and to meet tax and accounting obligations.

6. Who processes your information

We use these service providers to run the website. They process information on our behalf:

• Vercel: hosting.
• Supabase: sign-in, sign-in emails, database and recipe images.
• PostHog: analytics and session recordings.
• Stripe: payments, only if you buy something.

These providers store data mainly in the United States. We may also disclose information when the law requires it.

7. The My Curated Haven parenting app

Your website sign-in may also work in the My Curated Haven parenting app, which uses the same account system. The website does not display or use information you entered in the app.

8. How long we keep information

We keep your account and saved recipes until you ask us to close your account. Browser identifiers stay in your browser until you clear your browser data. PostHog keeps analytics and recordings for a limited period set by its retention rules, then deletes them. Support emails and purchase records are kept as long as we need them to help you and to meet legal and accounting obligations, including after you close your account.

9. Your choices and rights

• Use the free recipes without signing in.
• Ask us to delete the analytics linked to your account or email address.
• Block analytics with your browser's privacy or content-blocking settings.
• Ask us for a copy of your information, to correct it, or to delete it and close your account.

To make a request, email support@mycuratedhaven.com from the address you sign in with. We verify requests before acting on them. Depending on where you live, for example California or the European Union, you may have further rights under local law, and we will honour them.

10. Children

The website is for parents and caregivers. It is not directed at children, and we do not knowingly collect personal information from children under 13. If you think a child has given us personal information, email us and we will delete it.

11. Security

The website uses HTTPS. Access to saved recipes is limited to the signed-in account that saved them. No method of storing or sending information is completely secure, but we work to protect yours.

12. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change affects how we use information you have already given us, we will tell you before it applies.

13. Contact

Questions about privacy: support@mycuratedhaven.com.