Privacy
Last updated: 2026-11-03
Operated by: Denis Ergashbaev · Spain
We process organizer emails, event settings (including optional expected due dates), guest display names, locations, guesses, name suggestions, uploaded family photos, and session metadata (IP address, country, timezone, and user-agent) to provide and secure your celebration. Private management links grant control of an event. OurLittleBaby is operated by an individual based in Spain and is currently non-commercial.
Your event and photos
Events, guest contributions and uploaded photos have no automatic expiry. They remain stored until deleted; closing voting does not delete them.
We store the organizer’s email to send their private host link and a keepsake after voting closes. We use Resend to deliver these emails and Namecheap forwarding for support messages. The address and queued messages are deleted when the celebration is deleted.
If you create a celebration in ChatGPT with the OurLittleBaby app, ChatGPT sends us only what the app needs: the celebration details, the photo you attach, the reveal answer when you create it, the chat language and an anonymous ChatGPT user ID, which we keep only as a one-way hash to limit requests. Until you create the celebration, the details and photo are kept in a draft that is deleted 7 days after its last change; the reveal answer is never stored in a draft. You give your email on the OurLittleBaby website when you first open your admin page, not in ChatGPT. Your private admin link appears in your ChatGPT conversation and is covered by OpenAI’s privacy policy: anyone who can read that conversation, including through a shared chat link, can manage the celebration.
We keep encrypted backups with Koofr, a storage provider in the EU, so celebrations can be recovered after a failure. Each backup is deleted automatically after 30 days, so deleted data can remain in a backup for up to 30 days. Deletion records are applied before any backup is restored to public service.
The server sends only aggregate product counts to PostHog EU. We do not use its browser SDK, personal profiles, persistent visitor IDs or analytics cookies. Names, answers, photos and private links are excluded.
Google Analytics and browser product analytics are disabled in our iOS and Android apps. Optional celebration reminders are scheduled locally on your device. Server metrics contain hourly action counts, grouped by platform and celebration type, without visitor or attempt identifiers; small groups are suppressed.
Restricted Sentry error reports operate independently of optional analytics. They contain error types and application code locations, with messages, personal details, cookies, and private URLs removed. A network connection to Sentry still exposes its source address to that service.
On the web, the server may send your public IP address to IPWHOIS.io or ipapi.is for timezone suggestions when geolocation is enabled; our iOS and Android apps use your device timezone locally without external IP lookup.
Where applicable, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent at any time, without affecting earlier lawful processing.