Effective October, 2026
The Bossy Kitchen (https://www.thebossykitchen.com/, the "Website" or "Site") is operated by The Bossy Kitchen LLC, a limited liability company registered in Minnesota, United States. This Privacy Policy describes the categories of information the Website and its service providers may collect, how that information is used or disclosed, and the choices and rights that may be available to visitors.
This policy applies to this Website. Websites operated by third parties have their own privacy policies.
1. Who I Am and How to Contact Me
The Bossy Kitchen is a recipe and food-related website created by Gabriela Baumgartner and operated through The Bossy Kitchen LLC. For questions or requests concerning privacy, contact contact@thebossykitchen.com.
2. What Information Is Collected
Information you provide: When you leave a comment, subscribe to a newsletter, or contact the Website, information may include your name, email address, comment, message, optional website URL, and other details you choose to submit.
Information collected automatically: The Website, its hosting and security services, Google Analytics, advertising partners, and other tools may receive IP addresses, browser and device details, referring pages, page visits, interaction and event information, dates and times, approximate location, cookie IDs, and similar technical identifiers.
Information from service providers: Advertising, analytics, email, anti-spam, and affiliate service providers may process information in connection with the activities described below. The precise information processed depends on the service and its configuration.
3. How Information May Be Used
Information may be used to operate and maintain the Website, answer comments and inquiries, send requested newsletters, measure readership and advertising, improve content and performance, prevent fraud and spam, maintain website security, administer affiliate relationships, and meet legal obligations. Newsletter messages provide an unsubscribe mechanism.
4. Cookies and Similar Technologies
The Website uses or may use cookies, tags, pixels, web beacons, and similar technologies for essential site operation, spam and bot protection, comment conveniences, analytics, advertising, affiliate attribution, social-sharing functions, reader engagement, and communications measurement.
Cookies may remember your preferences, recognize browser activity, help limit repetitive advertisements, and support measurement. Third parties may set or read cookies according to their own practices.
You can control and delete cookies through browser settings; blocking them may affect website features. Depending on your region, the Website may also provide advertising or cookie consent choices, including a "Do Not Sell or Share My Personal Information" link where applicable. An advertising opt-out link is not necessarily a technical block on every other script installed on the Website. This policy does not claim that Google Analytics is blocked before consent unless such behavior has been verified.
WordPress cookies
If you leave a comment, you may be offered the option of saving your name, email, and website in cookies for future comments. WordPress may set cookies for people who log in to administer the Website, including temporary login, remembered-session, screen-preference, and editing cookies. WordPress default cookie durations can vary according to settings and functionality. These administrative features are not necessarily available to ordinary readers.
5. Information Security and Retention
The Website is made available over HTTPS and uses hosting and security-related services to support operation and protection. Reasonable measures are used to limit unauthorized access and misuse, but no online system can be guaranteed completely secure. This document does not assert PCI-standard vulnerability scanning or a particular security certification that has not been verified.
Comments and associated metadata may be stored for an extended period, including to help recognize follow-up comments and manage moderation. Newsletter, correspondence, and other records may be retained as necessary to provide services, honor requests, support operations, and comply with law. Retention by third-party providers may follow their separate terms and settings.
You may request access to, correction of, or deletion of personal information as described in the rights sections below, subject to legitimate retention needs and applicable law.
6. Third-Party Services and Links to Their Policies
The following services support Website operation, communications, analytics, advertising, or reader engagement. Not every optional plugin feature is necessarily enabled. Details about features that require configuration are subject to confirmation before publication.
WordPress and comments
WordPress provides the publishing software used by the Website. Comments may collect the information entered in the comment form plus technical data such as an IP address, user-agent string, and referrer information for moderation and anti-spam purposes.
Akismet (spam protection)
The Website uses Akismet to help identify and filter spam comments. Akismet may process a commenter's IP address, user agent, referrer, site URL, name, email address, and comment content. See the Automattic Privacy Policy.
Google Analytics 4 and Google Site Kit
The Website uses Google Analytics 4 (GA4), with the Google Analytics code inserted through Site Kit by Google. GA4 is used to understand visits, reader engagement, device categories, approximate location, referring sources, and content performance. Google may process device information, online identifiers, and website activity depending on the configuration and applicable privacy settings.
For information about these practices and choices, see the Google Privacy Policy, Google's explanation of information from websites and apps, and the Google Analytics Opt-out Browser Add-on.
Cloudflare
The Website uses Cloudflare for performance and security services. Cloudflare processes technical requests and security information in connection with delivering and protecting the Website. See the Cloudflare Privacy Policy.
Contact forms, Cloudflare Turnstile, and email delivery
When a visitor contacts the Website using a form or email, information provided in the message and technical information needed for delivery or spam prevention may be processed. The Website has an active Simple CAPTCHA with Cloudflare Turnstile plugin. Where Turnstile is applied to a form, Cloudflare processes signals such as the visitor's IP address, browser information, TLS fingerprint, and the relevant website origin to distinguish people from automated traffic. For details, see the Cloudflare Turnstile Privacy Addendum and Cloudflare Privacy Policy.
The Website uses a WordPress SMTP/email-delivery plugin to transmit administrative and reader-requested emails. The specific email delivery provider and any additional contact-form service should be confirmed before publication.
Gravatar
Where Gravatar is enabled, a hash derived from a commenter's email address may be provided to Gravatar to determine whether an associated profile image exists. An approved comment may display that image and the name and website URL provided by the commenter. See the Automattic Privacy Policy.
Kit newsletters
The Website uses Kit (formerly ConvertKit) for newsletters and email updates. Information may include subscriber names (where supplied), email addresses, subscription and unsubscribe preferences, and engagement information. Newsletter messages may include pixels or tracked links used to measure opens and clicks; some mail applications limit this measurement. You can unsubscribe via the link in any newsletter. See Kit's Privacy Policy and Data Processing Addendum.
Comment reply email notifications
The Website uses a comment-reply notification tool. When a commenter chooses to subscribe to replies, their email address may be used to send notifications when someone responds to their comment. This is separate from subscribing to our Kit newsletters. Comment-notification preferences are managed through the notification service and applicable controls.
Grow by Mediavine - reader engagement
The Website has an active Grow for WP integration plugin provided by Mediavine. Depending on which reader-facing features are enabled, Grow may provide sign-in, bookmarking, saved content, subscriptions, and other engagement functions that process visitor identifiers, account information, or interaction details. For information on Mediavine's data practices and reader privacy choices, see its Legal and Privacy Center.
Hubbub Pro - social sharing
The Website has an active Hubbub Pro plugin from NerdPress, which provides social-sharing and related features. If readers use social-sharing links, they may be directed to social media platforms governed by those platforms' privacy policies. Any additional engagement measurement or other enabled features should be verified in the Hubbub settings. For provider information, see NerdPress and its Privacy Policy.
Recipes and website-functionality plugins
The Website uses WP Recipe Maker and other WordPress plugins for recipe display, ratings, comments, optimization, and security. Features such as ratings or reader submissions may process the information visitors submit. Some functionality is provided locally through WordPress rather than by a separate tracking provider; merely installing a plugin does not mean it sends visitors' personal data to its developer.
Embedded content and external websites
Posts may include embedded videos, social content, affiliate links, or other external resources. Those services may collect information or use cookies as though you had visited their websites directly. Their privacy practices are governed by their own policies.
7. Programmatic Advertising - Raptive
Advertising
CMI Marketing, Inc., d/b/a Raptive ("Raptive") is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive's data usage, click here: https://raptive.com/creator-advertising-privacy-statement
Advertising technologies may use cookies, IDs, and other data to display, deliver, measure, and, where permitted, personalize advertisements. Some advertising-related sharing can fall within the legal definitions of "sale" or "sharing" under certain US state privacy laws, even where personal information is not sold as a mailing list. Available privacy options depend on the location and technologies involved.
8. Anonymous, Aggregated, and Publicly Visible Information
The Website may use statistical or aggregated information to understand content performance and advertising. Information described as anonymous must not be assumed non-identifying if it can reasonably be connected to a person using other data.
Approved comments, commenter names, submitted website links, and any associated public profile images may be visible to other readers. Comment email addresses are not ordinarily displayed publicly. Visitors should avoid posting information they do not wish to make public.
9. Display Ads, Retargeting, and Affiliate Links
Display ads are provided through Raptive. The Website may also use affiliate links. Following these links can allow affiliate merchants or networks to use cookies and other identifiers to attribute purchases and pay commissions.
The Bossy Kitchen participates in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a way for sites to earn advertising fees by advertising and linking to Amazon.com. Amazon may use cookies to track referrals and qualifying purchases. As an Amazon Associate, I earn from qualifying purchases. See Amazon's Privacy Notice.
10. International Visitors - GDPR and Other Rights
Visitors in the European Economic Area, United Kingdom, Switzerland, or other jurisdictions may have rights under applicable data protection laws. Depending on the processing activity, relevant legal bases may include consent, legitimate interests, performance of a requested service or contract, and legal obligations. A legal basis must be appropriate to the particular activity; this list does not establish that consent has been obtained for a particular tracker.
Where applicable, rights can include access, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent. Withdrawing consent does not affect processing lawfully performed before withdrawal. Visitors may also be able to complain to a competent data protection authority.
Information may be processed in the United States or other locations used by our service providers; applicable legal safeguards and rights concerning international transfers continue to apply where required.
To exercise an applicable privacy right, email contact@thebossykitchen.com.
11. State-Specific Privacy Rights (United States)
State laws differ in their scope and generally apply only when their statutory conditions are met. The description of a right below does not mean every state law automatically applies to this Website. We will assess and respond to applicable requests under the relevant law and exceptions.
California - CCPA / CPRA
Eligible California residents may have the right to know the categories and specific pieces of personal information collected, request access, correction, or deletion, opt out of the sale or sharing of personal information, limit certain uses of sensitive personal information, and be free from unlawful discrimination or retaliation for exercising applicable rights. Advertising-related opt-out choices may be available through the Site's "Do Not Sell or Share My Personal Information" link. Submit requests to contact@thebossykitchen.com. See California Privacy Protection Agency.
Colorado
Eligible residents may have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of certain targeted advertising, sales of data, and certain profiling. Applicable law may provide rights to appeal a request decision. Requests: contact@thebossykitchen.com. See Colorado Attorney General - Colorado Privacy Act.
Connecticut
Eligible residents may have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of certain targeted advertising, personal data sales, and profiling. Requests and applicable appeals may be submitted to contact@thebossykitchen.com. See Connecticut Attorney General.
Virginia
Eligible residents may have rights to access, correct, delete, and obtain a portable copy of personal data, and to opt out of targeted advertising, personal data sales, and certain profiling, subject to applicable exceptions. Requests: contact@thebossykitchen.com. See Virginia Attorney General.
Utah
Eligible Utah residents may have rights under the Utah Consumer Privacy Act to access and delete certain personal data, obtain a portable copy in applicable circumstances, and opt out of sale of personal data or targeted advertising. Utah's statute does not provide the same general correction right found in some other state laws. Requests: contact@thebossykitchen.com. See Utah Division of Consumer Protection.
Nevada
Nevada law provides eligible consumers the ability to submit verified requests to opt out of certain sales of covered information as specifically defined by Nevada law. Its definition of "sale" differs from those in some comprehensive state privacy laws. Submit applicable requests to contact@thebossykitchen.com. See Nevada Revised Statutes, Chapter 603A.
Minnesota
Minnesota's Consumer Data Privacy Act took effect on July 31, 2025. Where it applies, eligible Minnesota residents may have rights concerning access, correction, deletion, portability, targeted advertising, personal data sales, and certain profiling. Minnesota registration of The Bossy Kitchen LLC does not, by itself, establish that the Act applies to every processing activity; applicability thresholds and exceptions matter. Requests: contact@thebossykitchen.com. See Minnesota Attorney General.
Other States With Consumer Privacy Laws
Comprehensive consumer privacy laws also have taken effect in Delaware, Iowa, Indiana, Kentucky, Maryland, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, and Texas. Eligible residents may have some combination of rights to access, correct, delete, obtain copies of data, appeal decisions, or opt out of particular advertising, sale, or profiling practices, depending on the applicable statute. Other state laws, including Florida statutes, may provide different and narrower protections.
To submit a request under an applicable law, email contact@thebossykitchen.com with a description of your request. We may need information reasonably necessary to verify identity and locate records, and may have legitimate grounds to retain some information. We will not discriminate unlawfully against individuals for exercising applicable rights.
12. Other Rights Related to Your Information
Unsubscribe: Every newsletter includes an unsubscribe option, or you may email contact@thebossykitchen.com.
Access and correction: You may ask what personal information is held about you and ask that inaccuracies be corrected, where applicable.
Deletion: You may request erasure or deletion, subject to necessary administrative, security, recordkeeping, and legal exceptions.
Automated spam processing: Visitor comments may be checked by spam detection services.
13. Sensitive Personal Information
Please do not submit sensitive personal information in public comments or contact messages. Examples include government identification numbers, health information, financial account details, religious or political beliefs, and other sensitive data. If information of this kind is voluntarily submitted, it will be handled subject to applicable law and this policy.
14. Children's Information
The Website offers general cooking and recipe content and is not directed to children under 16. The Website does not knowingly seek to collect personal information from children under 16. If you believe a child has submitted personal information requiring removal, contact contact@thebossykitchen.com so the request can be reviewed.
15. Changes to This Policy
The Website may revise this Privacy Policy to reflect changes in its operations, service providers, legal obligations, or practices. The revision date at the beginning of the page will be updated when a revision is published.
16. Contact
The Bossy Kitchen LLC
Minnesota, United States
Privacy email: contact@thebossykitchen.com
Website: https://www.thebossykitchen.com/
Website use, copyright, recipes, comments, and related terms are addressed in the separate Terms and Conditions page: https://www.thebossykitchen.com/terms-and-conditions/