What we collect, why, and how to make it go away.

In short

StorkDrop is a small product run by two people. We collect what we need to run the tracker and nothing else. We don’t sell data, don’t share it with advertisers, and don’t use it to train AI models. Anything you put in your tracker stays in your tracker. If you delete your account, we delete it.

What we collect

• Your email address when you sign in. Used to deliver one-time sign-in codes and (post-delivery) optional digest emails. Magic-link auth, no passwords.
• Tracker content you create: tracker title, vanity URL, due date, phase, dilation, induction methods, milestones, status notes, baby stats (name, weight, length, optional birth date and time). This is the product.
• Guestbook + name-guess content from anyone with a link to your tracker. Free-text name + message + reactions. Stored against your tracker.
• Basic operational data: timestamps, IP addresses (briefly, for rate-limiting and abuse prevention), browser user-agent strings (in error reports).

What we deliberately don’t collect

Full legal name, address, social security number, medical record number, hospital name, doctor name. The product is designed so couples never need to enter these. Birth date and time are optional; if you enter them, they’re stored as tracker content like any other field above. We don’t sell or license tracker data. If that ever changed, it would require explicit opt-in, with clear disclosure of what would be shared and with whom.

Visibility tiers

You choose who sees your tracker: public (anyone with the URL), invite-only (URL plus a code we mint for you), or password-gated(URL plus a passphrase you set). Private trackers are not indexed by search engines. Access cookies are signed and scoped per-tracker so a cookie that unlocks one tracker can’t unlock another.

Sub-processors

We use a small set of well-known service providers to run StorkDrop. Each one processes a narrow slice of data on our behalf:

• Vercel, hosting and content delivery.
• Supabase, database, authentication, and realtime updates.
• Resend, transactional email (sign-in codes, noreply@storkdrop.baby).
• Sentry, error monitoring. Captures the URL and a stack trace when a server error happens. Free-text content from your tracker is not deliberately shipped.
• Plausible, privacy-friendly analytics on the marketing pages only. No cookies, no personal data, no cross-site tracking. The dashboard and tracker pages are not instrumented.

Retention

Trackers can be archived (soft-deleted) and recovered for 30 days. After 30 days the tracker and all attached data are hard-deleted. To delete your entire account before that, email support@storkdrop.baby from the email address on the account. Self-service account deletion is on the roadmap.

Your rights

You can request a copy of the data we hold about you, or have it deleted, at any time. Email support@storkdrop.baby from the address on your account.

Children’s data

StorkDrop is operated by adults for adults. We don’t knowingly collect data from anyone under 13. The baby’s name and stats are data about an infant entered by their parent or admin; that’s the parent’s decision to make.

Changes

We’ll update this page if the way we handle data changes. Material changes get a heads-up by email to active accounts.