The most secure data is the data we never take.

Static by design

• Every page on this site is a static page. There is no server-side account logic to attack, because there are no accounts yet.
• The waitlist form goes to the waitlist endpoint (a form-delivery service that relays your entry to us). Beyond that, the only network calls are the cookieless analytics beacons on guide pages, described in the privacy policy.
• The waitlist asks for your email address and your consent, nothing else. With it we record the consent time, the policy version (waitlist-2026-08-v1) and which page you joined from. No due date, no stage, no child's name, no browser language.

Locked-down responses

• The strict Content-Security-Policy is enforced on every response of the new site, limiting what the browser is allowed to load and run.
• Security headers ship with every page, not just the front door.

Nothing watching you

• No third-party script origins. Everything the page runs is served from our own domain, including the analytics script on guide pages.
• No cookies on any page. The new pages run no analytics; guide and tool pages use cookieless PostHog served from our own domain and Vercel's performance beacon, disclosed in the privacy policy. We cannot leak tracking data we never collect.

Isolated family accounts

Authenticated accounts where each family's data is isolated from every other family's. One household, one boundary.

Encryption everywhere

Encryption in transit and at rest for family data, so it is protected both on the wire and on disk.

Export and delete in one click

Your data leaves with you: export everything, or delete everything, in one click from inside the product. Until then, one email to hello@leelalu.com deletes your waitlist data within 7 days.