Privacy policy
Last updated July 22, 2026
The short version
Grow & Shine is designed for families, but email forms are for grown-ups only. We do not create child accounts, ask for child email addresses, or store names used on certificates.
Email subscriptions and Field Kits
When a grown-up optionally submits an email and gives consent, the address is sent securely to MailerLite for subscriber management, double opt-in, Field Kit delivery, newsletters, and unsubscribe handling. MailerLite processes that information under its own privacy terms. You may unsubscribe from any marketing email. Entering a Vault code and receiving a certificate do not require an email.
Vaults and completion certificates
A valid book code unlocks a short-lived, necessary cookie. The child’s display name is entered only after unlocking and both certificate formats are generated inside the browser. The name and certificate are not sent to or stored by Grow & Shine.
Secure Field Kit delivery
A MailerLite delivery email may link to this website using a secret after the # symbol. The browser removes that secret from the visible URL, exchanges it for a short-lived necessary download cookie, and does not place it in ordinary server access logs. The protected file is not public.
Regional Amazon links
For review links, the server may briefly send a visitor’s IP address to IPInfo to estimate the country. Grow & Shine does not log or retain the raw IP. A marketplace preference may be saved in a first-party cookie. Amazon receives information under its own privacy terms after a visitor follows an Amazon link.
Security and retention
The website has no customer database. Temporary security counters may use a one-way hash of a network address to slow repeated guesses; they expire automatically. Necessary cookies are used only for Vault access, Field Kit downloads, and marketplace preferences.
Your choices
To ask about access, correction, deletion, or consent, contact hello.growandshine@gmail.com. This policy should be reviewed with qualified counsel before launch, especially for the final business address and applicable jurisdiction wording.