Privacy

A small site should collect a small amount of data.

You can read our research and use sample lessons without an account. Saving a plan on your device, saving it online, and sharing progress feedback are separate choices.

Information we receive

Our hosting provider may process standard request information needed to deliver and secure the site, such as IP address, browser type, requested URL, timestamp, and error information. A program choice can reveal a personal interest, including pregnancy preparation. We do not ask for diagnoses, lab results, medications, birth dates, or a home address in the planner. Do not put medical or identifying information in household item notes.

Your personal program plan

The planner works in memory during your session. If you choose to remember it on your device, your browser stores your program choice, practical stage and preferences, action status and owners, household item names and notes, review dates, saved products, and check-ins. Check-ins include decision confidence, research time, reported spending, and usefulness. A saved lesson copy may also be stored for use when the online service is unavailable. Other users of the same browser may see this information. You can export it, turn off local saving, or delete local plan data in Settings.

Optional online household storage

With an active purchase, you can explicitly save a plan online or load it on another device. Online plans are encrypted at rest. The saved fields are the same plan fields described above. Saving is not automatic; the app checks versions to avoid silently overwriting another device’s changes. Delete online plan data from Settings whenever you choose. Local copies and exported backups are separate and remain under your control. Online plans are retained until you delete them or the service closes; inactive unpaid checkout records are removed after seven days.

Purchase access and cookies

When you choose checkout, we temporarily keep this tab’s current plan and any feedback-withdrawal identifier in browser session storage so your work can be restored after payment or cancellation. This does not turn on permanent local saving or send the plan to Stripe. The copy is removed when restored, discarded if older than one day, and normally cleared when the tab closes. If browser storage is unavailable, we offer a downloadable backup before leaving.

When you initiate checkout, we create a random household access key and keep its hash on our server. An HttpOnly, same-site cookie maintains access on your browser for up to 30 days. A separate security cookie, lasting up to one day, helps protect forms against cross-site requests. Save your private household key after purchase to restore access. Anyone with the key can access your purchase and any saved online plan. Sign out to remove the access cookie from this browser.

Stripe processes checkout, billing details, and payment information under its own privacy policy. We do not receive your card number. We retain references to the checkout and payment, access status, and timestamps to provide access and handle refunds and support. Your program choices and household plan are not sent to Stripe as checkout metadata. Payment providers may retain transaction records under their own policies and obligations.

Optional progress feedback

Only when you choose to share and confirm, we receive your starting and latest confidence ratings, research minutes, completed and total action counts, usefulness rating, and content version. This report excludes your program choice, household items, shopping list, spending, email, and identifying details. We store it under a random report identifier for up to one year, encrypted at rest. Repeat submissions from the same report identifier replace the earlier report. A report may be withdrawn from Settings while this device retains that identifier. If you clear browser data first, we may no longer be able to identify that report. Optional reports measure user-reported experience, not medical effects.

Exports and sharing

Plan backups, checklists, calendar files, reports, and access-key files are downloaded to your device. Backups and reports can contain household information. Review them before sharing and store access keys privately. An exported checklist is a snapshot and does not synchronize changes.

Pilot invitations

If you request an invitation, we store your email address, which offer you requested, when you signed up, and the version of the contact-consent notice. We use these to manage pilot interest and email you about that offering. A signup is not a purchase, reservation, or general newsletter subscription. We do not sell this list or share it with retailers for their marketing.

Pilot signup records are encrypted at rest and retained for up to 90 days. We do not ask for pregnancy status, fertility history, sex, birth dates, a home address, or medical information. Your room selection is not included in your signup. When you receive a pilot email, you can reply to ask for removal. No emails are sent automatically by the signup form.

Checklist progress

Your checklist works without permanent storage. If you choose “Save completed steps on this device,” your browser stores only the identifiers of completed steps. We do not receive that checklist. Uncheck that option or choose “Reset progress” to remove the saved steps. A shared device can expose saved checklist progress to its other users.

Outbound retailers

When you follow a retailer or source link, that destination’s privacy policy applies. Affiliate links may contain identifiers that let a retailer attribute a purchase to Be Gone Goods.

Optional site analytics

Our optional analytics uses our own collector, Google Analytics 4 (Google), and PostHog. Analytics stays off until you choose “Allow analytics.” If you allow it, this browser stores a random visitor identifier and a session identifier, your first traffic source and most recent non-direct source, campaign labels, and landing page for up to 90 days. A session ends after 30 minutes of inactivity or starts again for a new non-direct campaign. A signed, HttpOnly cookie carries this attribution to our own server. We measure page views, links to products and retailers, planner starts, completed lesson actions, saved product options, checkout starts, and verified program purchases. Public page paths and product IDs can reveal an interest, including pregnancy preparation. These identifiers are pseudonymous rather than a promise of anonymity.

We do not collect household contents, personal plan preferences, lesson answers, form entries, email addresses, access keys, URL query strings or fragments, or precise location through analytics. Referrer information is reduced to the source hostname; campaign parameters are restricted to short labels. Advertising click identifiers are not retained. We do not use advertising pixels, fingerprinting, or session replay, or send these analytics identifiers to retailers or Stripe.

After a fresh opt-in, Google receives approved public-page events and campaign labels through its tag; the tag is never loaded in the private planner or program pages. PostHog receives a restricted copy of approved events from our server, with private program paths grouped as “/plan/,” no household fields, no visitor IP forwarding, no person profiles, and no recording SDK. Google may process your IP address and browser information to deliver its service. Advertising storage, Google signals, and ads personalization are disabled. Both providers process analytics under their own privacy policies and retention settings. Changing analytics preferences stops new provider events; it does not automatically erase events already received by those providers. Contact us for deletion requests before clearing your browser identifiers. Our previous first-party-only permission does not authorize provider sharing.

At checkout, with analytics permission, we save a copy of the attribution in the encrypted purchase record to match our own verified payments and refunds to the visit. This attribution expires after 90 days and is removed from the purchase record during storage maintenance. Raw analytics events are retained for up to 91 days (90 days plus the current UTC day). Withdrawal stops collection, clears the browser identifiers and cookie, and excludes this visitor’s retained events from reporting; the excluded event files age out on the same schedule. Payment records needed for purchase access remain separate. Clearing browser storage before withdrawal can prevent us from recognizing earlier analytics records.

You can change your choice using “Analytics preferences” at the bottom of any page. We honor Global Privacy Control and Do Not Track by disabling analytics. You can also exclude this browser from measurement while testing or managing the site. This does not change your household plan or purchase access.

Advertising

We do not sell household plans or share them with retailers for marketing. Optional progress feedback is separate from site analytics and is described above.

Changes

This notice was last updated October 12, 2026. Material changes will be reflected on this page.