Privacy Policy | The Barefoot Bub

1. Information We Collect

Account information. When you sign in with Google OAuth, we receive your name, email address, and profile picture from Google. If you register with email and password, we store your email and a hashed version of your password (never the plaintext).

Registry data. Registries you create, items you add, and reservation details left by gift-givers (email address only).

Newsletter subscriptions. Email address you provide when subscribing. We do not collect names or phone numbers for the newsletter.

Affiliate click data. When you click an affiliate link, we log: which item was clicked, the referring page, the affiliate network, and a timestamp. We do not log your IP address or user agent beyond what server logs capture automatically.

Usage and attribution data. We use Google Analytics to understand aggregate usage, and a first-party cookie to record how you first arrived at the site (the marketing source and referring site). See Cookies below for details. This data is used in aggregate to improve the site and measure which channels work — it is not used to identify you personally or for advertising.

2. How We Use Your Information

To authenticate your account and maintain your session
To show you your registries and saved items
To send the Monthly Outdoor Digest (newsletter subscribers only)
To track affiliate commissions earned on clicks
To improve the site based on aggregate usage patterns

We do not sell your personal information. We do not use your data for advertising.

3. Cookies

The Barefoot Bub uses an essential session cookie plus first-party analytics and attribution cookies. We do not use advertising cookies, ad-network retargeting, or third-party marketing cookies, and we do not sell your data. Our Cookie Policy explains each cookie, how long it lasts, and how to opt out.

4. Third-Party Services

Google OAuth. Sign-in is handled by Google. Their Privacy Policy applies to the OAuth flow.

Google Analytics. We use Google Analytics for aggregate usage analytics. Google processes this data as described in their Privacy Policy; you can opt out with Google's opt-out browser add-on.

Resend. Newsletter emails are delivered via Resend. Your email address is stored in our database and transmitted to Resend for delivery only.

Neon (PostgreSQL). Our database provider. Data is stored in the US.

Vercel. Our hosting provider. Standard server access logs are retained per Vercel's data retention policy.

5. Data Retention

Account data is retained as long as your account is active. You can request deletion at any time by emailing hello@thebarefootbub.com. Newsletter subscriptions are retained until you unsubscribe.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, email hello@thebarefootbub.com.

7. Contact

Questions about this policy? Email hello@thebarefootbub.com.