EmGee.dev / Work / Mothercraft Care
Mothercraft Care
A hand-built replacement for a practice's WordPress site: same look and addresses, faster, safer, with its own editor.
About
The practice had a WordPress site with a theme it liked and a plugin list it didn't. We rebuilt it by hand so it looks the same and every old address still works, but there is no WordPress, no plugins and nothing to patch every week.
The owner edits pages and blog posts in a simple editor; the public site is plain HTML, so it is quick on a phone and has nothing for bots to attack.
What it does
- Pages, blog and images, edited in the browser.
- Old WordPress addresses redirected one by one.
- Search-engine friendly: sitemap, clean addresses, Google Search Console.
Security statement
- Public pages are static files: no database or login behind them.
- Editors sign in with a password stored only as a scrypt hash. New editors get a one-time set-up link (72 hours) instead of a password by email.
- Signed, HttpOnly, Secure, SameSite=Strict session cookies; every change checked for same origin; sign-in throttled.
- Uploaded images are checked by their content and have camera and location details stripped. Pasted HTML is sanitised.
- Strict Content Security Policy on the editor.
Shared platform measures (servers, backups, updates, monitoring) are on the Security page. Found a problem? security@emgee.dev.
Privacy statement
What it keeps
- Editor accounts (name, email, password hash).
- No visitor accounts, forms, cookies or analytics on the public site.
Why
So the practice can update its own site.
Where it is kept
On our web server in Melbourne. Nightly encrypted backups (see Security); daily copies kept 2 weeks, weekly 2 months, monthly 1 year.
Who else sees it
| Service | What for | Where |
|---|---|---|
| Cloudflare | Delivers the site and blocks attacks; sees IP addresses and request details. | Global |
| Google Search Console | Shows the practice how the site appears in Google; receives no visitor data. | USA |
How long, and deleting it
Editor accounts stay until the owner removes them.
The practice is responsible for its own clients' information; its email is with Zoho Mail (Australian data centre). Ask what we hold about you, correct it or have it deleted at privacy@emgee.dev; we answer within 30 days. The general Privacy page covers your rights under the Australian Privacy Principles.
Contact
Questions about Mothercraft Care: hello@emgee.dev. Security reports: security@emgee.dev. Privacy: privacy@emgee.dev.