Privacy Policy

Last updated: August 31, 2026

This Privacy Policy explains how Winsome Anvil (“we”, “us”) collects and uses information when you visit winsomeanvil.com or use our apps, including Hearthlist at hearthlist.winsomeanvil.com.

Who we are

Winsome Anvil builds small household and everyday apps. Contact: hello@winsomeanvil.com.

Information we collect

• Account information — when you sign up for an app such as Hearthlist: name, email address, and a hashed password.
• Household content you create — for example groceries, meals, chores, schedules, reminders, and invite-related details you enter in the app.
• Billing information — if you subscribe, payment is processed by our payment provider (Lemon Squeezy). We receive subscription status and related account identifiers; we do not store your full card number.
• Technical data — basic server logs (such as IP address, browser type, and timestamps) used to run and secure the service.
• How you found us — if you arrive from an ad or another site, we may store the campaign tags on that link (for example “facebook” or “pinterest”) with your Hearthlist account so we can tell which ads lead to signups. This is first-party data; it is not sold and is not used to advertise to you on other sites.
• Marketing-site visits — winsomeanvil.com may use Cloudflare’s cookieless Web Analytics to count page views. It does not set a tracking cookie and is not used on Hearthlist pages that hold household data.

How we use information

• Provide and improve the apps (including shared household features)
• Authenticate you and keep your account secure
• Send essential service messages (for example password-reset emails when configured)
• Process subscriptions and respond to support requests
• Understand which ads and links lead to signups, so we can stop spending on ones that do not

We do not sell your personal information.

Sharing

We share data only as needed to operate the service, for example:

• Hosting / database providers that store app data
• Payment providers (e.g. Lemon Squeezy) for checkout and subscriptions
• Email delivery if password-reset or similar mail is enabled

Household members you invite can see shared household content inside the app.

Cookies and sessions

Hearthlist uses a session cookie so you stay signed in. It is required for the app to work and is not used for third-party advertising. The marketing site’s optional Cloudflare analytics beacon does not set a cookie.

Data retention

We keep account and household data while your account is active. You may request deletion by emailing hello@winsomeanvil.com.

Security

We use reasonable safeguards (including hashed passwords and HTTPS). No method of transmission or storage is 100% secure.

Children

Our services are not directed to children under 13. Do not create an account for a child under 13.

Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy: hello@winsomeanvil.com