Draft for review

Privacy

KidRecall is a free lookup for public US recall notices. You can use the site without an account and without an email address. Recall pages do not set a tracking cookie.

What an alert stores

The signup on a recall page or a category page asks for two things: your email address, and one follow choice. The follow choice is a category, a brand, or a product keyword. You also confirm that you are 18 or older. That checkbox is not stored.

We do not ask for your name, a child's name, a birthdate, or a photo. Do not put a child's name in the product keyword.

If you sign up, the private database stores:

• the email address
• the category, brand, or product keyword
• whether the alert is still waiting for confirmation or is confirmed
• which recall notices were already emailed, so the same notice is not sent twice

The alert is not active until you open the confirmation email and confirm. The confirmation link expires after 48 hours. Until then the row stays pending, and no recall digest is sent.

How to delete it

Every KidRecall email, including the confirmation, has a one-click unsubscribe link. Opening that link deletes the email address and the category, brand, or keyword for that alert. It also deletes the record of which notices were emailed for it. If you follow more than one thing, each email has its own link, and you use each link to delete that alert.

There is no separate account. After you unsubscribe, that email address is not kept for the alert.

Who can read it

Alert rows live in a private database. Row-level security is on and there is no public access policy, so the site's public key cannot read them. Only the server, with a key that is never sent to the browser, reads or changes them. Mail is sent by Resend from alerts@kidrecall.com.

Signup and confirmation attempts are counted for one hour under a hash. The count table does not store your email address or your network address.

What we do not do

KidRecall does not use advertising pixels, social-media tags, or other third-party trackers. Logs for the alert job do not include email addresses or the keyword you follow. We do not sell personal information.

Official CPSC and NHTSA notices can include a company phone number or email. That contact information comes from the notice.