Privacy Policy

Overview

Cradle and Care doesn't use accounts or passwords. When you build a registry, we create a private, hard-to-guess link that is the only way to get back to it — there's nothing to log into, and nothing tied to your real-world identity unless you choose to give it to us (for example, by completing a payment). This policy explains what information we do collect, why, and who we share it with.

Information we collect

• Onboarding answers. The questions you answer about your home, budget, and plans (e.g. due date, living situation) are stored against your session's private link so we can generate and re-render your registry. If you provide an optional ZIP code, we use it only to look up your general climate (via a third-party ZIP lookup service, no address or precise location) so we don't recommend winter gear somewhere that never needs it, or vice versa — it is stored with your other answers, never sold, and never used for anything else.
• Weekly newsletter email (optional). After your checklist is built, you can choose to give us your email for a weekly newsletter timed to your due date. This is always opt-in — never required to use the checklist — and confirmed by a link we send you before any newsletter goes out. If you subscribe, we store your email and due/birth date so we can time it, and nothing else; every email includes a one-click unsubscribe.
• Registry advisor chat messages. If you use the chat feature, we store your messages and the assistant's replies against your session so the conversation persists across visits.
• Payment information. If you unlock paid features, payment is handled entirely by Stripe on their own checkout page — we never see or store your full card number. We receive confirmation that a payment succeeded, not the card details themselves.
• Technical and bot-prevention data. We briefly process your IP address to enforce fair-usage rate limits and to run Cloudflare Turnstile, a bot-detection check that protects the site from automated abuse. See Cloudflare's Turnstile privacy policy for what Cloudflare itself collects as part of that check.
• Local browser storage. We use your browser's local storage (not cookies) to save onboarding progress if you leave partway through, and to recognize a returning registry owner on the same device. This data stays on your device and isn't something we can read from our servers.
• Anonymous usage analytics. To understand how the site is used and where the checklist flow can be improved, we keep a first-party, privacy-first log of anonymous events — for example, that a checklist was started or completed, or a link was shared. It contains no name, no account, and nothing that identifies you; a visit's events are tied together by a random id in your browser, not by anything personal. We do not use third-party analytics, ad pixels, or cross-site tracking of any kind.

How we use this information

• To generate your personalized registry and the plain-language explanation behind each pick, using Anthropic's Claude models.
• To power the registry advisor chat, using Claude for answers and Voyage AI to find relevant products for your question.
• To process one-time unlock payments, via Stripe.
• To send the weekly newsletter, only if you opted in, via Resend.
• To prevent automated bot abuse and enforce fair-usage limits, via Cloudflare Turnstile and IP-based rate limiting.
• To understand and improve how the checklist flow works, using our own first-party, anonymous analytics — never third-party trackers.

We do not sell your personal information, and we do not use it for advertising or cross-site tracking.

Third-party services we use

We rely on a small number of service providers to run Cradle and Care. Each processes the data described above only as needed to provide their part of the service, under their own privacy policies:

• Supabase — database and storage for registry and session data.
• Railway — application hosting.
• Anthropic (Claude) — generates registry explanations and powers the advisor chat.
• Voyage AI — generates embeddings used to retrieve relevant products for chat answers.
• Stripe — processes one-time unlock payments; we never see full card details.
• Resend — delivers the weekly newsletter and its confirmation email, only to addresses you've opted in.
• Cloudflare Turnstile — bot detection; see Cloudflare's Turnstile privacy policy.
• Amazon. Product links point directly to Amazon — no affiliate tags, no commission — when you click "Buy on Amazon," you leave our site and any purchase, address, and payment information is handled entirely by Amazon, under Amazon's own privacy policy. We never see it.
• Zippopotam.us. If you provide a ZIP code, we send it to this free public lookup service to resolve a general climate region — no other onboarding answers are shared with it.

Cookies and similar technologies

We don't use advertising or analytics cookies. Cloudflare Turnstile may set cookies or read device signals as part of its bot-detection check, per its own policy linked above. Cradle and Care itself uses browser local storage, not cookies, for the onboarding-progress and returning-visitor convenience described above.

Data retention

We keep registry and session data for as long as your private registry link may reasonably still be in use. If you'd like your data deleted sooner, contact us using the details below.

Children's privacy

Cradle and Care is intended for use by adults — parents, caregivers, and gift-givers building a baby registry — not by children. We do not knowingly collect information from children under 13.

Your choices

Because there's no account system, your private registry link is effectively your access control — anyone with the link can view that registry, so treat it like you would any other private link. To request access to, or deletion of, the information tied to a specific registry, contact us below with your registry link.

Changes to this policy

We may update this policy as the product changes. We'll update the "last updated" date above when we do.

Contact us

Questions about this policy, or requests about your data? Email [email protected].