Privacy

Last updated October 12, 2026.

GoodNest is operated by 143 Labs LLC, which is responsible for the information described here. Questions go to [email protected].

What we store about a child

A first name, a birth year, and the date of a celebration. We never ask for a full name, an address, or a photograph for the giving page — the illustrated avatar you pick is what appears there, in the link preview, and in the printed book.

Postcards, and photographs of your child

A parent — and only a parent, signed in, and only about their own child — may send a postcard: a short note and up to four photos. We store those files privately in Google Cloud Storage. They are never public, never indexed, and never attached to an email.

• Only people who have already given to that child can see one, and only on their own token-addressed page. That page is unlisted rather than password-protected — as with the giving link, anyone it is forwarded to could open it, so treat it the way you would treat your home address.
• Each picture is served through a signed link that expires within the hour, and the link is only ever created after we have checked who is asking.
• A parent can hide their child from any individual giver at any time. That applies to every postcard already sent, not just to future ones.
• Taking a postcard back deletes the files themselves, not just the listing. Cloud storage keeps a short-lived copy of anything deleted before it is purged for good; we keep that window as small as the service allows.
• Photos are resized and re-encoded in your browser, before they are uploaded, which removes EXIF metadata — including the GPS coordinates most phones record. Only photos can be sent, not videos, because there is no equivalent way to strip a video’s location on your device.
• Anyone who receives a postcard can save the picture, exactly as they could with a photo sent in a text message. Send accordingly.
• Postcards are included in the archive you can download at any time, and are deleted with the child’s record if you close your account.

Safety checks, reports and the law

We do not browse what families and guests leave here. We check the kind of file, its size, hidden location data and links. We may use automated checks that compare a file, by computer, with lists kept by child-protection groups of images already known to be illegal. No such comparison is connected today. If we use an outside service for it, that service receives the file or its fingerprint for that purpose only.

To stop spam and to answer reports, we keep the internet address and the time of each upload for 12 months. A person at GoodNest looks at a message only to answer a report, a legal order, or a match if a check we may run finds one.

Where the law requires a report to the National Center for Missing & Exploited Children, it also requires us to keep the material and the account records for a year, so in that one case a deletion request cannot be honored right away. We give information to law enforcement when a valid legal order requires it, or when we believe someone is in immediate danger. If you believe something on GoodNest should not be here, there is a Report this link on every postcard and message, or email [email protected] and tell us which page or message. The content policy and the terms say what never belongs here.

Who can see a child’s page

A child’s giving page is unlisted, not public. Each URL contains a random token, every page sends noindex, nofollow to crawlers, and none of them are linked from anywhere on the site. Anyone holding the link can view the page, so share it the way you would share your home address.

What we store about a guest

• The name and email you enter when you give
• The amount you say you are sending, and the note you wrote
• Whether the family confirmed it arrived

Gifts go straight from you to the family by the service they chose, so GoodNest never sees your bank, card or payment details. If you buy the keepsake book, Stripe takes that payment: card details go to Stripe directly, and we only see the outcome.

Who we share it with

Stripe (to take payment for the keepsake book), Resend (to send your email and notify the family), and Google Cloud (which hosts the database and the application). Nobody else. We do not sell data, run ad networks on this site, or use third-party analytics that identify you.

How long we keep it

Contributions are kept while the family’s account exists, because they are the record of a gift. Email [email protected] to have a child’s page and everything attached to it deleted.

The time capsule, and the long promise

A time capsule message is meant to be kept until the birthday the family chose: the eighteenth, or a later one, up to the twenty-fifth. That is a longer commitment than most companies outlive, so it is worth being exact about what it means.

• Messages are stored privately. They are not shown to anyone on GoodNest — including us for any purpose other than answering a report, a legal order, or a match if a check we may run finds one — until the parent has approved them and the unlock date has passed. There are two exceptions. The child’s parent or guardian can download the family’s own copy of the capsule at any time, and that copy includes sealed messages. And if a letter includes a story about something the writer owns, the parent or guardian can see the short title the writer gave it.
• A letter can include one picture of an object. It is resized and re-encoded in your browser before it is uploaded, which removes EXIF metadata, including GPS coordinates, and we check again before the letter is sealed. The picture is stored privately and is never public: it does not appear on a giving page, in a link preview, in an email, or anywhere a firm can see.
• The parent or guardian who set the page up can view any message before it is sealed and can delete it. The person who left it can ask us to delete it at any time.
• A child who has reached the unlock date can ask us to delete everything held about them, and we will.
• If GoodNest ever shuts down, we will give families at least ninety days’ notice and a way to download everything in their capsule before anything is deleted. We will not sell capsule contents as an asset, in a wind-down or otherwise.

Email [email protected] for any of the above.