Privacy

When you make an account we keep your name, the email address you sign in with, and your phone number if you give us one. The phone number is only for keeping your account safe and getting you back in if you lose your email. We do not use it for marketing and we do not share it.

The story holds what you put on it: the baby’s name if you give one, the month they are due, the color you picked, the birth date once you announce it, and the web address of your registry if you add one.

When someone writes on your story we keep the words they wrote and their name. We keep an email address or phone number too, so you can thank them. If they say how they know you, we keep that as well.

We keep the photos and the story entries you add, along with the day each one is of and anything you wrote under it.

We keep the email addresses you type in to invite people, and your settings for which emails you want.

We keep a count of how many people followed the registry link on your story. It is a number for the story, with nobody attached to it.

We never ask how a pregnancy came about, and there is no field for it anywhere in the product.

We do not ask for health information of any kind.

Photos have their hidden details removed before they are stored. That includes the location a camera writes into the file. It happens twice: in your browser as the photo is prepared, and again on our side when it arrives.

We do not buy information about you from anybody.

The words live in a Postgres database run by Supabase, on servers in the United States.

The photos live in Cloudflare R2 storage. That store has no public web address. Every photo is served through a short-lived link that checks who is asking before it hands anything over.

Email is sent through Resend. The site itself runs on Cloudflare.

When something on the site breaks, a report goes to Sentry so we can fix it. It says which page and what went wrong. We take out email addresses and the codes in your links before it’s sent.

Your story is the page where family and friends leave messages. You choose who can open it, from three settings:

• Only us. Only you and anyone helping you take care of the story can read it or write on it. Links you’ve sent stop working until you change this.
• The people we invite. Anyone holding a link you sent can read the messages and leave one.
• Anyone with the address. Anyone who has the web address can read the messages. Leaving one still takes a link you sent.

Photos and dated entries are separate from all three. Only you and anyone helping you take care of the story can see them, in every setting, with no exception and no switch to turn it off.

Stories are never listed in search results. Every page carries the instruction that keeps crawlers out, and the whole address range is disallowed as well.

The email address or phone number somebody leaves with a message is for you. It is shown to you on your own screens and it never appears on the story.

One cookie keeps you signed in.

If you open an invitation link, a second cookie remembers it for twelve hours so you do not have to find the link again.

We count page views with PostHog so we know which screens people use. The web address is replaced with a blank template before anything is sent, so the count never carries a baby’s name or a link to a family’s story. PostHog keeps a cookie in your browser to avoid counting you twice. Nobody is identified and nothing you do on a screen is recorded.

We keep what you put here until you take it away.

Today you can hide or delete a message on your story. You can delete a photo, take somebody off a story, and pause the whole story.

Deleting your account is not something you can do for yourself yet. Write to hello@elliepost.com and we will delete your account and everything on your stories by hand, and write back when it is done.

If you wrote a message on somebody else’s story and want it taken down, write to the same address. We will take it down even if you have already left that story.

ElliePost is made for adults. You need to be 18 to start a story or to write on one.

The photos on a story are of children, and they are there because a parent put them there. We do not run facial recognition, nothing is tagged automatically, and no photo is used to train anything.

When any of this changes we will change the date at the top of this page. The terms say what you agree to, and the page about registry links says whether we earn anything from them.