Privacy Policy

The Dad Post ("we," "us," or "our") operates the website thedadpost.com and provides a monthly letter subscription service for dads. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or purchase our products.

By using our website or subscribing to our service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

When you subscribe or make a purchase, we collect information through our payment processor, Stripe, including:

• Full name
• Email address
• Shipping/mailing address
• Gift recipient name and address (if applicable)

We do not directly collect or store your payment card information. All payment data is processed securely by Stripe.

Information Collected Automatically

When you visit our website, certain information is collected automatically, including:

• IP address
• Browser type and version
• Device information (operating system, screen size)
• Pages visited, time spent on pages, and referral source
• Cookies and tracking pixels (see Section 4 below)

2. How We Use Your Information

We use the information we collect to:

• Fulfill and ship your subscription orders
• Process payments through Stripe
• Communicate with you about your order (shipping updates, receipts)
• Improve our website and user experience through analytics
• Measure the effectiveness of our advertising campaigns
• Respond to your inquiries or customer service requests
• Comply with legal obligations

3. Third-Party Service Providers

We work with trusted third-party services to operate our business. These providers only have access to the information necessary to perform their specific functions:

For more information about how these providers handle your data, please refer to their respective privacy policies: Stripe, Google, Meta, Vercel.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your experience and measure our advertising:

Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. GA4 sets cookies (such as _ga and _ga_*) that expire after up to 2 years. These cookies collect information about page views, session duration, device type, traffic sources, and general geographic location (city level). This data is sent to Google servers in the United States.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Meta Pixel (Facebook Pixel)

We use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel sets cookies (such as _fbp and _fbc) and tracks page views and purchase conversions. This data is shared with Meta for ad targeting and performance measurement.

You can manage your Meta ad preferences at Facebook Ad Preferences.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling cookies may affect some functionality of our website.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: With the third-party providers listed in Section 3, solely to fulfill their stated purpose
• Legal requirements: If required by law, subpoena, court order, or other legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction
• Protection of rights: To protect the safety, rights, or property of The Dad Post, our customers, or the public

6. Data Retention

We retain your personal information for as long as your subscription is active and for a reasonable period afterward to fulfill legal, accounting, or reporting obligations. Stripe retains payment data according to their own retention policies. Analytics cookies expire according to the timeframes noted in Section 4.

If you would like us to delete your personal information, please contact us using the information in Section 11.

7. Data Security

We take commercially reasonable measures to protect your personal information. Our website uses HTTPS/TLS encryption, and all payment processing is handled by Stripe, which is PCI DSS compliant. We never see or store your credit card numbers.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to know: Request details about the personal information we have collected about you
• Right to delete: Request that we delete your personal information
• Right to opt out: Opt out of tracking cookies via browser settings or the tools listed in Section 4
• Right to correction: Request that we correct inaccurate personal information
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights

To submit a request, please email us at hello@thedadpost.com. We will respond within 45 days of receiving your request.

9. California Residents

Under the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA), California residents have additional rights:

• Categories of information collected: Identifiers (name, email, address), commercial information (purchase history), and internet activity (browsing data, cookies)
• Sale of information: We do not sell your personal information
• Exercising your rights: California residents may contact us at hello@thedadpost.com to request access to or deletion of their data

10. Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at hello@thedadpost.com.

11. Do Not Track Signals

Our website does not currently respond to "Do Not Track" (DNT) browser signals. This is because there is no industry-wide standard for how websites should respond to DNT signals. You can manage tracking through the opt-out methods described in Section 4.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify affected users (for example, by email). We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us:

• Email: hello@thedadpost.com
• Website: thedadpost.com