Privacy Policy
Who we are
Tiny Wonder Post is operated by Tiny Wonder Post (US). For any privacy question, contact hello@tinywonderpost.com.
What we collect
When you visit Tiny Wonder Post, our hosting provider processes technical data that every web request contains, such as your IP address, browser type and the page requested. This is needed to deliver pages and to block abuse.
Free letters are made entirely in your browser: the names you type are never sent to us. When you buy a kit and create it, we store its answers (including your child’s first name) so you can download it again; on January 31 after the season we delete the names and keep only anonymous totals such as age range and arrival date.
If you create an account, our sign-in provider stores your email address and sign-in details. We store your account identifier, your plan, your credit balance and a record of your purchases so the service knows what you can use.
If you email us at hello@tinywonderpost.com, we keep the message and your address only as long as needed to reply.
Cookies
Tiny Wonder Post does not set cookies for tracking or advertising.
Services that process data for us
These providers process data on our behalf, under their own privacy policies:
| Service | Purpose | Data |
|---|---|---|
| Cloudflare | Hosting, content delivery and protection against abuse | IP address, request details and browser information, processed to deliver and secure the site |
| Umami (self-hosted) | Cookie-free visit statistics on our own analytics server | Page address and title, referrer, browser, operating system, device type, screen size, language, and country, region and city looked up from the IP address; no cookies and no IP addresses in its database. The analytics server's web server logs record IP addresses. Events: Page views and anonymous events (tool used, preview viewed, purchase) with the traffic source and product. Never names or anything typed into a form. |
| Clerk | Sign-in and account security | Email address, sign-in method and session information for your account |
| Stripe | Payments, subscriptions and invoices | Name, email, billing address and payment details; we never see or store your card number |
How long we keep data
Request logs are kept by our hosting provider for a short period for security and debugging. Analytics records (pseudonymous visit and event data) stay on the analytics service and are used only for aggregate reports. Account data is kept while your account is open; payment records are kept as long as tax law requires. We do not sell personal data.
Your choices and rights
You can block cookies in your browser settings. Depending on where you live, you may have the right to access, correct or delete personal data we hold about you; email hello@tinywonderpost.com and we will respond within 30 days.
Children
Tiny Wonder Post is not directed at children under 13, and we do not knowingly collect their personal data.
Changes to this policy
This policy is effective from October 17, 2026. If it changes, the new version will be posted on this page with a new effective date.