Privacy.

Last updated: 21 July 2026

The short version

• We do not sell your data, and we never will.
• We do not use your posts to train anything.
• We set no tracking cookies and run no analytics. There is not a single third party script on this site.
• Postboxes are unlisted and are never indexed by search engines.
• You can ask us to delete a postbox and everything in it, and we will.

Who is responsible

baby postbox (babypostbox.com) is operated by Elliot Robinson, a sole trader based in the United Kingdom, who is the data controller for the information described here. For anything at all about your data, write to hello@babypostbox.com.

What we collect

When you buy a postbox

Stripe collects your email address, your billing name and your country in order to take the payment and work out the tax. They pass those on to us, and we keep your email address because it is how you get back into your postbox. Your card details go to Stripe and never touch our systems.

About the child

You give us the child’s first name, and you can add their date of birth and a photograph of them. All three are optional except the name, which the postbox is built around. We use them only to show the postbox to the people who hold its links.

The parents or guardians decide what goes into a postbox and who can see it. We hold it on their behalf, and we act on their instructions.

From family and friends who post

When somebody posts, we record the name they choose to be known by, how they are related to the child, and what they posted. We also ask, optionally, for their email address, so we can remind them at the child’s milestones. That address is theirs to give or withhold, it is never required in order to post, and we do not check it.

Anyone holding a sharing link can post without an account and without paying. By posting through one, you agree to this policy.

The posts themselves

Letters, photos, videos and voice notes, along with the date, the occasion and who wrote them. This is the whole point of the product, and it is the most personal thing we hold.

Technical information

Our host, Vercel, keeps standard server logs which include IP addresses, according to their own retention policy. We do not build profiles from them and we do not have any analytics product installed.

Why we are allowed to hold it, in legal terms

• To provide what you bought (contract). Your email address as an administrator, the child’s details, and the posts.
• Because it is in our legitimate interests. Keeping the site secure and working, and answering you when you get in touch. We have considered whether this is fair to you and we think it plainly is.
• Because you agreed (consent). Milestone reminders, and anything we ever send you about baby postbox itself. You can withdraw either at any time.
• Because the law requires it. Keeping records of sales for tax purposes.

Who else sees it

Only the companies we need in order to run the service. Each of them handles it on our instructions and none of them may use it for their own purposes.

• Stripe, to take payments.
• Vercel, who host the site and store the photos, videos and voice notes.
• Neon, who host the database.
• Resend, who send our emails.

We may also disclose information if the law requires it. Beyond that, nobody. We do not sell or rent personal data to anyone, for any purpose.

Where it is stored

The services above operate internationally, so your information may be processed outside the UK. Where that happens, it is covered by the safeguards UK data protection law requires, such as the International Data Transfer Agreement or an adequacy decision.

Cookies, and what your browser remembers

We set one cookie, called bpb-session. It keeps a postbox administrator signed in for up to 180 days and holds nothing but a random token. It is strictly necessary, which is why you do not get a cookie banner: there is nothing here to consent to.

We set no advertising, tracking or analytics cookies of any kind.

Your browser also stores a few things locally, on your device only, which are never sent to us as a profile: the name you last posted under, so grandparents do not have to reintroduce themselves; a key that lets you edit your own posts; an unfinished letter, so you do not lose it; and whether you have dismissed the welcome card. On a shared computer you can clear the first two with “Forget me on this device”, in the About panel of any postbox.

How long we keep it

A postbox is a keepsake, so we keep it for as long as it is wanted. We do not delete it on a timer.

• Posts are kept until somebody removes them. Removing a post, or removing a person, takes them out of the postbox at once; they then wait 30 days in case it was a mistake, and after that they are deleted for good, along with any photo, video or recording.
• Sign-in links expire quickly: 30 minutes for signing in, 7 days for an invite, 60 days for a gift.
• Sessions end after 180 days, or as soon as you sign out.
• Payment records are kept for six years, because tax law says so.
• The postbox itself is kept until an administrator asks us to delete it.

Emails we send

Most of our email is not marketing and you cannot turn it off, because it is the service itself: your way back into your postbox, an invitation, a gift handover. Without those emails the product does not work.

Milestone reminders, and anything about baby postbox itself, are optional, separate, and never ticked for you. Tell us at hello@babypostbox.com and we will stop them.

Your rights

Under UK data protection law you can ask us to:

• show you what we hold about you
• correct anything that is wrong
• delete it
• give you a copy in a portable form (an administrator can do this themselves, at any time, with “Download everything” inside the postbox)
• stop or limit what we do with it
• stop relying on your consent, at any time

Email hello@babypostbox.com and we will answer within a month. There is no charge.

A note on deleting a postbox: it belongs to the family, so we act on an administrator’s instruction. If you posted into someone else’s postbox and want your own posts taken out, you can usually remove them yourself from the device you posted from, and if not, tell us and we will do it.

Children

A postbox is created and controlled by adults, and the child does not use the site until the day their parents hand it over. We do not knowingly collect information directly from children. When the child is old enough, the rights above are theirs, and we will help them exercise them.

Security, honestly

Connections are encrypted, administrator access needs a verified email address rather than a password you invent here, and postboxes carry a noindex instruction so search engines leave them alone.

The part worth understanding: access to a postbox works by link, and photos and recordings are served from addresses that are unguessable but not individually locked. That is what makes it work for a grandparent with no account, and it means anyone who is given a link, or a copy of a photo, has it. We cannot take that back. An administrator can change the sharing link at any time, which stops every copy of it working.

If you are unhappy

Please tell us first, at hello@babypostbox.com. You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.

Changes

If we change anything that materially affects you, we will email the administrators of every active postbox. The date at the top tells you which version you are reading.

Terms

Our terms cover the rest of the arrangement between us.

Contact

For any privacy question at all, email hello@babypostbox.com.