Privacy Policy

1. Information we collect

We collect only what we need to serve you:

• Order information: your name, email, shipping address, phone (optional), and the products you buy.
• Account information (optional): email, name, password (stored only as a secure hash), and saved addresses.
• Payment information: handled entirely by Stripe — card numbers never touch our servers.
• Communications: emails you send us and, if you opt in, your marketing preferences.
• Basic technical data needed to run the site securely (such as IP address for fraud and rate-limit protection).

2. What we use it for

• Processing and shipping your orders, and sending order updates (confirmation, tracking, delivery).
• Managing subscriptions, gift cards, referrals, and your account.
• Sending promotional emails ONLY if you opted in — every one includes an unsubscribe link, and you can also change this in your account.
• Preventing fraud and abuse, and complying with legal obligations.

3. Who we share it with

We never sell your personal information. We share it only with the service providers that make the store work, each bound to use it solely to provide their service:

• Stripe (payments and subscriptions)
• Shippo and shipping carriers such as USPS and UPS (delivery and tracking)
• Brevo (transactional and, with your consent, marketing email)
• Google (sign-in, if you choose “Continue with Google”)
• Cloudflare (site security, content delivery, and infrastructure)

4. Children's privacy

Our products are made for toddlers, but our website and services are directed at parents and caregivers. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

5. Cookies

We use a small number of first-party cookies strictly needed to run the store: keeping your cart, keeping you signed in, and remembering a referral that brought you here. We do not use third-party advertising cookies.

6. Your rights and choices

You can unsubscribe from marketing at any time (link in every email, or the toggle in your account). You may request access to, correction of, or deletion of your personal information by emailing [email protected] — we honor applicable state privacy rights, including those under Florida and California law. We keep order records as required for tax and accounting purposes.

7. Security and retention

We use encryption in transit (HTTPS everywhere), hashed passwords, tokenized payment processing, and access controls on our systems. We retain personal information only as long as needed for the purposes above.

8. Changes to this policy

If we make material changes, we will update the date above and, when appropriate, notify you by email.