Privacy policy

Last updated 2026-11-12. This policy covers Cribpicks (cribpicks.com). Questions or requests: hello@cribpicks.com.

Browsing the site

You can read every page without an account. Our host, Cloudflare, keeps standard security logs (such as IP address, browser and the page requested). We count some actions, like a click to a store or a search, as daily totals per page; those counts have no user ID, cookie or IP address. We don't use ad trackers or advertising pixels, and we don't sell or share personal information.

Some tools remember your answers in your own browser (local storage), such as your hospital bag ticks or the car you picked in a fit tool. That stays on your device and isn't sent to us.

Services we use

• Cloudflare: hosting, our database, and security logs. We also use Cloudflare Web Analytics to count page views and visits. It records things like the page, the site you came from, and your browser and device type, without cookies.
• Google: sign-in. When you sign in with Google, we receive your name, email address and a Google account ID. We never see your Google password.
• Google Analytics: measures how the site is used, such as which pages are viewed and which buttons and store links are clicked. Google receives your IP address, browser and device details, and the pages you visit, and sets analytics cookies. We don't send Google your name, email address or anything you type into the site, we've turned off Google's advertising features, and Google Analytics isn't used on account, registry or admin pages. Visitors in the EU, EEA, UK and Switzerland don't get analytics cookies. You can opt out with Google's opt-out browser add-on or by blocking cookies in your browser.
• Resend: sends the emails you ask for (the hospital bag checklist, the budget plan and, if you confirm it, the newsletter). It receives your email address and the message.
• Unsplash: hosts some photos shown on the site, so your browser asks Unsplash for them and Unsplash receives your IP address.
• U.S. NHTSA vehicle database: our car-fit tools look up car makes and models from your browser, so NHTSA receives that request and your IP address.

Our fonts are served from our own site. Makers and stores we link to have their own privacy policies.

Cookies

We use cookies to sign you in: a sign-in cookie (kept for up to 30 days, or until you sign out) and a short-lived sign-in state cookie used during Google sign-in (10 minutes). Google Analytics sets its own cookies (named _ga and _ga_ followed by an ID, kept for up to 2 years) to tell visits apart; see Google Analytics above. No advertising cookies.

Accounts

Accounts are for adults 18 and older only, and you confirm that when you first sign in. We don't knowingly collect information from children, and children can't create accounts. If you believe a child created an account, email us and we'll delete it.

Product reviews

If you write a review, we store your rating, headline, review text, how long you used the product, whether you got it free or were paid, and the date, linked to your account. Your review is public with your first name and last initial. If you report a review, we store the reason and keep it private. You can edit or delete your review at any time.

Hospital bag checklist email, budget plan email and newsletter

If you ask us to email the hospital bag checklist or your budget plan, we store your email address, where you signed up and when we sent it. The emailed budget plan is a PDF of your amounts; it leaves out your due month and feeding plan. If you also tick the newsletter box, we store the wording you agreed to and the date, and we send a confirmation link; you're only subscribed after you click it. Every newsletter has a one-click unsubscribe link. To stop abuse of these forms, we keep a scrambled (hashed) version of your IP address for up to two days.

The budget planner itself runs in your browser. Its answers (like your budget, due month or feeding plan) aren't stored by us; the Download button builds the PDF and sends it straight back to you.

Sharing your hospital bag experience

To share what you used from your hospital bag, you sign in. We store your item answers and up to three items you type in, linked to your account so you can change them. We don't ask how you gave birth or how long you stayed. Only combined totals are shown, and an item's totals appear only once at least 10 people have answered it. Typed items are reviewed before they appear, without your name.

How long we keep data

• Account, reviews and hospital bag answers: until you delete them or your account.
• Email list: until you unsubscribe and ask us to delete your address, or delete your account.
• Hashed IP addresses for the email forms: two days.
• Security logs: as long as Cloudflare keeps them.

Your choices

You can delete your account at any time from your account page. That permanently deletes your account, your reviews and any reports you made, your hospital bag answers, your email list sign-up and any other data tied to your account. You can also email hello@cribpicks.com to see what we hold about you, correct it, or delete it, including an email address you used without an account.

Security and breaches

We limit what we collect, keep the database private and scramble IP addresses we keep. If a breach affects your personal information, we'll notify you as the law requires, including New York's data breach law.

Changes

If we change what we collect or who processes it, we'll update this page and the date at the top first.