Draft for review

Privacy

KidRecall is a free lookup for public US recall notices. You can use the site without an account and without an email address. Recall pages do not set a tracking cookie.

What an alert stores

The signup asks for your email address and what you want to follow. You can pick several categories and add several items. An item is a brand, a product name, and an optional model number. One confirmation email covers everything you add at once. You also confirm that you are 18 or older. That checkbox is not stored. You must tick the no-guarantee notice. We store the time you accepted it and the version of that notice.

We do not ask for your name, a child's name, a birthdate, or a photo. Do not put a child's name in a product name, a model number, or a product keyword.

If you sign up, the private database stores:

• the email address
• each category, brand, product keyword, or item (brand, product name, and model number if you gave one)
• whether that follow is still waiting for confirmation or is confirmed
• the time you accepted the no-guarantee notice, and the version of that notice
• which recall notices were already emailed, so the same notice is not sent twice

Nothing is active until you confirm. The confirmation link expires after 48 hours. Until then those rows stay pending, and no recall digest is sent. A model number is the strongest match. A name without a model number is labeled a possible match.

How to delete it

Every KidRecall email, including the confirmation, has a one-click unsubscribe link for each follow and a manage link. The manage link expires after 30 days. Opening an unsubscribe link deletes that follow and the record of which notices were emailed for it. The manage page can remove one follow, unsubscribe from everything, or delete all data stored for that email. Delete all removes the email address, every follow, the notice acceptance, and the record of which notices were sent.

There is no separate account. The manage page shows nothing unless the link in your email is valid. You can ask the site to email a new manage link. That request does not show whether the address is on file.

Who can read it

Alert rows live in a private database. Row-level security is on and there is no public access policy, so the site's public key cannot read them. Only the server, with a key that is never sent to the browser, reads or changes them. Mail is sent by Resend from alerts@kidrecall.com.

Signup and confirmation attempts are counted for one hour under a hash. The count table does not store your email address or your network address.

What we do not do

KidRecall does not use advertising pixels, social-media tags, or other third-party trackers. Logs for the alert job do not include email addresses or the keyword you follow. We do not sell personal information.

Official CPSC and NHTSA notices can include a company phone number or email. That contact information comes from the notice.