Privacy

Short version: we keep what we need to make and post your letters, for no longer than we need it. We never sell it, we never see your card, and the fairies do not talk.

What we collect, and why

• About you: your name and email (for receipts, order updates and your letters' links), and for anything we post, a shipping address.
• About your child: a first name, an age, how many teeth are already out, the things they love, and anything you tell us for a Tale of a Tooth. Optionally, on your account, a birthday month and day (never the year).
• Your choices: colours, art style, the fairy you picked from the gallery, and any fairy code.
• For a calendar: the ZIP code or town where the first tooth came out, so the journey starts somewhere your child knows. We picture the town, never a street or a house.
• An account, if you make one: your email, a password (stored scrambled, never readable), and, if you switch it on, a two-step sign-in secret.
• Payment: handled entirely by Stripe. We never see or store your card number.

Who else sees what

Only what each one needs to do its job, and nobody else. We do not sell, rent or share our list.

• Stripe (payment): what you type on Stripe's checkout page (card, name, shipping address), plus your email and what you bought. Not your child's name.
• Shippo and the US Postal Service (postage for boxes): the shipping name and address.
• Anthropic (helps write the personal touches in the letters): your child's age, the things they love and, for a Tale of a Tooth, what you told us. Your child's name is replaced with a placeholder before anything is sent, and is put back in here, on our side. Never your address or email.
• OpenAI (draws the pictures): the things your child loves and, for a calendar, the name of the town. Never your child's name, your address or your email.
• Our email provider sends our emails to you. Our web host (Opalstack, in the US) keeps the site and its data.
• Weather and places: for the line about the weather at your door, only your ZIP code goes to two public services (Zippopotam.us, then Open-Meteo), with no name or address. Place descriptions use data from GeoNames (CC BY 4.0).

A person looks at every picture and every personalized letter before it is printed.

Children

This shop is for grown-ups. We do not knowingly collect information from children under 13: a grown-up tells us a child's first name so the letters can be addressed, and children never type anything in. Two pages are made for children to see with a grown-up: the Screen Glass, which reads a letter aloud after the grown-up unlocks it with their order email, and the Fairy Window, where a child can tap a fairy within the 24 hours you choose. Neither page asks a child for anything, has prices, or links away. The fairy gallery pictures are drawn, not photographs of real children.

Emails

We send what you asked for: your receipt, order updates and tracking, Fairy Window reminders if you chose that, and sign-in links. If you start an order and do not finish, we may send up to two reminders, then delete the unfinished order after 30 days. News and Fairy Post letters only go out if you tick the box, and every one has a link to stop them.

How long we keep it

• Unfinished, unpaid orders: 30 days.
• A name left on the way in, without agreeing to emails: 90 days.
• Shipping labels (they show your address): 90 days after posting.
• What we used to make the letters (favourite things, a tale, the Family Portrait pictures and the drawings the pictures were based on): one year after posting, so we can reprint a lost envelope.
• The finished letters, so the Screen Glass keeps working as each tooth comes out: until the journey is over, at most seven years, then they are deleted too.
• The bare money record (date, total, payment reference, with no names or addresses): seven years, as tax law asks. Every personal detail is removed from it.

Deleting everything

With an account, go to Account, then Security, then Delete everything. Your account, your children's details, your orders' pictures and letters, and your place on any list are deleted straight away; only the bare money record above stays. Without an account, email hello@wobblypost.com from the address you ordered with and we will do the same within a week. An order already at the press will still be posted, then forgotten.

Cookies

One session cookie, kept for up to 30 days, remembers your name, your place in the story and an unfinished order. One more keeps our forms safe from forgery. No advertising, analytics or tracking cookies, and no third-party scripts.

Keeping it safe

Everything travels over HTTPS. Pictures and letters are private and only shown to the family whose order it is. Sign-in can use a one-time code from your phone. If something ever went wrong with your information, we would tell you promptly.

Questions

Write to hello@wobblypost.com. A person answers, not a fairy.

Last updated October 2026.