Legal
Privacy policy
Last updated: September 2026
You're trusting us with photos of your child, so this policy is written to be read. It describes what Bring the Moon collects, why, and what we will never do with it.
What we collect
Account information. Your email address, used to sign you in and to send you updates about your book and orders.
Book details. Your child's first name and age, which appear in the story.
Photos you upload. The photos of your child, plus the illustrated images we generate from them.
Order information. Shipping name and address, and order history. Payments are processed by our checkout provider — we never see or store your card number.
Usage data. Basic information about how the site is used, collected through the cookies and analytics tools described below.
How we use it
We use your photos and your child's details for exactly one purpose: creating your book. That includes checking uploaded photos for quality, capturing your child's look, illustrating the pages for you to review, assembling the final print files, and fulfilling your order. We use your email to send required sign-in, book, order, and shipping messages. After your book arrives, we may occasionally ask for feedback; every feedback email lets you stop those requests independently. We send product news and offers only after you request them and explicitly confirm by email, and you can unsubscribe at any time without affecting service or feedback messages.
We do not sell your data. We never use your photos in our own advertising. We do not use your photos to build general-purpose AI products — everything we create from your photos is used solely for your book.
If you turn on sharing for a book, we make a share page, a preview image, and a short video of its pages, and show them to anyone with the link until you turn sharing off. Deleting the project deletes them too.
If you send a book's digital edition to someone, we use the email address you give us to send them that one email, with a link to the book. We do not add them to any mailing list; they can choose to hear from us on the page the link opens. If they make their own copy of the book, that copy, including the look drawn from your photos, belongs to their account, and deleting your project does not delete it.
Who processes it for us
Like most online services, we rely on a small set of specialized providers to run Bring the Moon: cloud hosting and storage (Amazon Web Services), specialized computing and image-processing providers that perform the illustration work, a payments provider that handles checkout (Shopify), a professional print partner that produces and ships your book, an email delivery and marketing service (SendGrid), product analytics and error monitoring (PostHog and Sentry — see the next section), support services (Zoho Desk and Zoho SalesIQ), and a performance-tracking service we use to measure and improve illustration quality, which receives quality measurements and, at most, a child's first name — never photographs. SendGrid receives your email address and the delivery, consent, and suppression information needed to send the categories you chose and honor unsubscribes. Each provider receives only what it needs to do its job and is bound by its own contractual and legal obligations to protect your data.
Analytics, session recording, and support chat
We use PostHog to understand how the site is used and to test improvements, and Sentry to catch errors. Both can record session replays — a video-like reconstruction of a visit that may include what you type and the images shown on screen while you build your book, including your child's name and photos. We use these recordings only to debug problems and improve the product; they are held by those providers under their data-protection terms and are never used for advertising. If you'd rather not be included, email us and we will exclude your account, or use a content blocker — the site works fine with these tools blocked.
If you use the support chat bubble, the conversation is handled by Zoho SalesIQ and may be handed to our team in Zoho Desk. The assistant can answer public guidance questions; it may look up your order status, shipping tracking, or book progress only after your signed-in identity has been securely verified. Our emails include a standard open-tracking pixel that tells us whether a message arrived; most email apps let you block remote images if you prefer. Feedback emails also use standard link tracking so we know which rating link you clicked — and if you unsubscribe, we stop sending them entirely.
Cookies
We set a first-party identifier cookie (bb_aid, kept for one year) so our analytics can recognize a returning browser, and PostHog and Zoho SalesIQ set their own cookies for the analytics and chat features described above. We use no advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings; the site keeps working without them.
Children's privacy
Bring the Moon is a service for adults — parents, guardians, and gift-givers. We do not knowingly collect information directly from children. All information about a child (their name, age, and photos) is provided by an adult who confirms they have the right to share it by accepting our Terms when they start a book. If you believe a child's information was provided without proper authority, contact us and we will delete it.
Retention and deletion
We keep your photos and generated illustrations so you can reorder your book and so your projects remain available when you come back. If a project sits untouched for a year, we automatically delete its uploaded photos. To find your child in group photos and match the generated art to their look, we compute face measurements (sometimes called embeddings) from the photos you upload; these are stored alongside the photos. When you remove a photo, it stays in Recently deleted for 30 days so you can put it back, then it's deleted for good along with its face measurements. Delete now, or deleting your project or account, removes it right away.
You can delete a project — or your whole account — yourself at any time, or email us to do it for you. Deletion removes your photos, generated images, face measurements, and the stored illustration data built from your photos; residual copies in short-term backups and provider caches clear on a rolling basis, typically within 30 days. Order records are retained as required for accounting and tax purposes, so an account with orders is erased by deleting its photos and book data and anonymizing the order — email us and we'll take care of it. Feedback and reviews you've shared with us are deleted with your account too; we publish a customer's words on our site only with their explicit permission, and remove them on request.
If you send photos by a Bring the Moon project email address, Amazon Web Services temporarily stores the raw email and its attachments in a private bucket for up to 30 days so delivery can be processed and, when necessary, safely retried. We keep minimal email-preference and consent records for as long as needed to honor your choices, prevent future mail after an opt-out, and document consent. Asking us to remove your marketing data always removes you from active marketing eligibility; we may retain the minimal suppression record needed to ensure you stay unsubscribed.
Security
Your data is transmitted over encrypted connections and stored with access controls in professionally managed cloud infrastructure. Sign-in uses email links instead of passwords, so there is no password to steal. Those links stay valid for a long time so they always work when you need them — which means anyone who can read your email could open your account, so keep your email account secure. If you think a link has leaked, contact us and we'll revoke your sign-in links.
Your rights
You can ask us at any time to show you the personal information we hold about you, correct it, or delete it. Depending on where you live, you may have additional rights under local law; we honor reasonable requests regardless of geography.
Contact
Questions, requests, or concerns: email hello@bringthemoon.com. A human reads every message. If we update this policy, we'll change the date at the top and note material changes here.