Cookies & similar tech

Last updated: 20 June 2026

We use the smallest set of cookies and local-storage entries we can. We do not use advertising cookies and we do not sell tracking data.

Strictly necessary

Authentication session (set by our backend) — keeps you signed in. Cannot be disabled without breaking the product.
CSRF / security tokens — protect against cross-site request forgery.
Stripe — sets a security cookie on the checkout/return page to prevent fraud (only when you start a Premium checkout).

These do not require consent under UK PECR / EU ePrivacy.

Analytics (consent-based where required)

We use PostHog (EU-hosted) to understand which features people use, in aggregate. Where required by your local law we will ask for your consent before loading analytics; otherwise we rely on legitimate interest with a clear opt-out below.

To opt out: enable "Do Not Track" in your browser, or contact privacy@babynamedbaby.com and we'll suppress your analytics events.

Local storage

We store a small amount of UI state (last-opened tab, draft inputs) in your browser's local storage so the app feels responsive. Clearing your browser storage will reset this.

Changes

We'll update this page if we add or remove cookies. See our Privacy Policy for the legal bases we rely on.