Privacy Policy
Effective October 12, 2026
isthatbabyhereyet.com ("the site") is run by Good Work Dojo LLC, a Texas limited liability company ("we"). This policy says what we collect when you visit the site or make a page on it, why, who handles it for us, and how to get rid of it.
What we collect
- Your email address. When you sign in with Google we receive the email address on your Google account; when you sign in with a link we use the address you typed. We use it to sign you in and to tell you apart from other people. We never send marketing email.
- What you put on your page. The baby's name, the due date, the answer, the sex, the birth details, the status line and the registry link are yours to type and yours to change. Everything on a page is public by design while the page is active — anyone with the address can read it, and so can search engines that ignore our "do not index" instruction.
- The address you pick. The part after
isthatbabyhereyet.com/is public and, once claimed, is never given to anyone else, even after you delete the page. - Server logs. Like every website, our hosting provider records requests (address, time, browser type, the page requested) for a short time to keep the site running and to find abuse.
- A hashed network address, briefly. While an address is on hold before sign-up we keep a salted hash of the requesting network address, to stop one person holding hundreds of addresses. The hash is kept while the address is on hold and until the hold is cleaned up, two to three hours after it lapses. The raw address is never stored.
- Anonymous usage analytics. We count page views and clicks with PostHog. Analytics never contains names, email addresses, the text you type or the links you add — only the page address, which state and look the page has, and which button was pressed. Text on the page is masked before it is captured. There is no session recording.
- Whether our ads work. We advertise the site on Google. If you arrive from one of our ads, Google's tag loads once on that first page, in a hidden frame of its own, to note the ad click in a cookie — and once more, the same way, if you then make a page, to tell Google Ads that a page was made. That is all it ever says: not whose page or which, and nothing you type, and no email address, goes with it. It never shares a page with anything you type, and it never runs on a family's own page. If you did not arrive from an ad, Google is not loaded at all.
Why we collect it
To run the service (sign you in, show your page, keep your edits), to keep it safe (rate limits, abuse detection), and to understand in aggregate how the site is used so we can improve it. That is the whole list, plus one narrow addition: counting whether our own Google ads lead to pages being made (see Cookies and analytics). We do not build profiles, and we do not use your information to target advertising at you.
Who processes it
We use a small number of providers, each only for the job named:
- Supabase stores the database and handles sign-in.
- Vercel hosts the site and keeps its server logs.
- Postmark sends the sign-in email.
- PostHog processes the anonymous analytics.
- Google signs you in when you choose "Continue with Google"; Google's own privacy policy applies to your Google account.
- Google Ads counts whether a visit that started from one of our ads ended with a page being made (see Cookies and analytics).
Each provider is bound by its own terms to use the data only to provide its service to us. We do not sell or share personal information with anyone else.
Your page is public by default
A page at isthatbabyhereyet.com/your-address can be read by anyone who has the address. We ask search engines not to index custom pages, but we cannot force them. You have three controls: Requesting privacy hides everything on the page behind one sentence; Deactivate replaces the page with "This page is no longer active."; Delete removes it for good. All three are in your dashboard.
How long we keep things
- A live page stays as long as you keep it.
- A deleted page is removed from view immediately and purged from the database within thirty days.
- A deleted account is removed immediately, together with all of its pages.
- The addresses you claimed are kept as a name-only record indefinitely, so nobody can reuse them after you.
- Provider backups may hold copies for up to their own retention window (Supabase: daily backups kept for a limited period).
- Server logs are kept by our hosting provider for a short, fixed period.
Deleting a page or your account
You can delete any page from its settings, and your whole account from the Account page. Both are immediate and self-serve; no email to us is needed. If you cannot sign in, write to hello@isthatbabyhereyet.com from the address on the account and we will delete it for you.
Cookies and analytics
We set only the cookies the site needs to work: the one that keeps you signed in, a matching signed-in marker that lives as long as it does and only tells the homepage which link to show you, and a few short-lived ones that carry you through signing in and claiming an address (the cookie that remembers an address you are holding lasts two hours, the hold itself ten minutes; the sign-in markers an hour or less). None of those is used for advertising. Two more can come from Google Ads, and only if you arrived from one of our ads: on that first page, Google's tag — loaded in a hidden frame of its own, never alongside anything you type — sets a first-party cookie (_gcl_au, kept for 90 days) and another holding that ad click's identifier, so that if you then make a page, the tag can load once more, the same way, and tell Google Ads that the click led to a page. That report says a page was made, not whose or which; ad personalization is switched off in the tag; and nothing you type, and no email address, ever goes to Google Ads. A visit that did not start from an ad never loads Google. There is no cookie banner: none of these cookies profiles you or targets advertising at you, and blocking Google's tag with any content blocker costs you nothing on the site. PostHog does not set a cookie; it keeps an anonymous identifier in your browser's local storage, which we link to your account identifier (never your email) once you sign in so that your own visits count as one person.
Your rights
We do not sell or share personal information, and we do not use it for targeted advertising. Wherever you live, you can see what we hold (it is what you typed, plus your email address), change it (in the editor), and delete it (a page or the whole account) yourself at any time. If you are in California or another state with a privacy law, those rights apply to you here without any extra steps, and we will not treat you differently for exercising them.
Children
Accounts are for adults. The information about a baby on a page is provided by that baby's parent or guardian; we do not knowingly collect information from children, and we do not collect anything from the children the pages are about beyond what their parents choose to write.
Changes
If this policy changes, the effective date at the top changes with it. Substantive changes will be noted on this page.
- September 27, 2026: added Google Ads conversion measurement — the "Whether our ads work" item above, the Google Ads provider, and its cookie under Cookies and analytics.
- October 12, 2026: analytics also record a page's color theme, font and celebration choice. No personal data.
Contact
Good Work Dojo LLC · hello@isthatbabyhereyet.com