Privacy policy

Last updated October 4, 2026

BumperBuddy is a sticker for your young driver's vehicle, and a private way for neighbors to send you notes about how they're driving. This page says, in plain words, what we keep, who helps us run the site, and how to have it all deleted.

The short version

• Notes go only to the parents. They are never public.
• We never sell your information, and we never use it for ads.
• We keep only what the site needs, and we delete old photos and internet addresses on a schedule.
• You can close your account and delete your family's information at any time.

BumperBuddy is for grown-ups

Parents and guardians, 18 or older, make the accounts, and the neighbors who send notes are adults too. Kids don't use the site, and we don't knowingly collect information from children under 13. If you think a child has made an account, write to us at [email protected] and we'll delete it.

We do keep a little information about young drivers (a first name, and the vehicle they drive) because their parents give it to us so notes reach the right family. We treat it with extra care.

What we keep

From parents:

• your email address, and your password in scrambled form (we can't read it)
• your family name
• each driver's first name, and their vehicle's type, color and description
• your Buddy Code: the pictures, and any letters you chose
• when you confirmed you're a parent or guardian, 18 or older
• when you order a sticker: your shipping name and address, what you ordered, the amount, Stripe's payment reference numbers, and whether it's paid and shipped

From neighbors who send a note:

• what they saw, and anything they choose to add: their own words, where it happened, a photo, and their name or number
• the internet address (IP address) of the phone or computer they used. We keep it only to stop anyone from flooding a family with notes.

Photos: phones hide your location inside every photo. We take it out, first on the neighbor's phone and then again on our side, before a photo is saved.

Photos sent before we started doing this have been cleaned the same way. A few of those older photos are in a format we can't clean. We leave them as they are, and they're deleted within 90 days, like every photo.

We don't use analytics or advertising cookies, and nothing on the site follows you around the web. One cookie keeps you signed in, and that's all.

Who sees it

• You. Notes about your driver come to you, on your dashboard and by email. Nobody else sees them: not other families, not neighbors, not the public.
• A neighbor sending a note sees only the vehicle's color and type (“the tan golf cart”) and the sticker's pictures. Never your name or your driver's name.
• The small team that runs BumperBuddy can see the database when we need to keep the site working or answer your questions.
• We'd share information with the police or a court only if the law requires it.

The companies that help us run the site

We share information only with these companies, and only what each one needs to do its job. Each has its own privacy policy.

• Fly.io (hosting). Our website and database run on Fly.io's computers in the United States, on an encrypted disk. Everything listed above is stored there.
• Resend (email). Sends our emails. It gets your email address and what's in the email: a note about your driver (including your driver's first name and the note), or a link to set a new password.
• Stripe (payments). When you order a sticker, Stripe gets your name, email and shipping address so it can take your payment, along with your card details. We never see or store your full card number.
• Printify (printing and shipping, once sticker ordering opens). When you order a sticker, Printify and the print shop it sends the order to get your name, your shipping address and the sticker image (your Buddy Code and the QR code) so they can print the sticker and mail it to you. The sticker image never includes your child's name, unless you spelled it out in your code's letters.
• Google Fonts. Our pages load their lettering from Google, so your browser asks Google for the font files. Google sees your internet address, but nothing you type.

We never sell your information, rent it out, or use it for ads.

How long we keep things

• Photos on notes: deleted 90 days after the note was sent.
• Neighbors' internet addresses: deleted 30 days after the note was sent.
• Notes: kept while your account is open, so you can look back at them, and deleted when you close it.
• Sticker orders: if you order a sticker, we keep the order record (your shipping name and address, the amount, and Stripe's payment reference numbers) for 7 years for our books, even after you close your account.
• Links to set a new password: work for 1 hour, and only once.
• Backups: our host keeps backup copies for a few days, so deleted information is gone from backups within about a week.

Closing your account

Sign in, choose Your account, then Delete my account, and type DELETE to confirm. That deletes your account, your drivers and vehicles, your Buddy Codes, every note and every photo, right away. We can't undo it. The only thing we keep is the record of any sticker order, for our books (see above).

Can't sign in? Set a new password, or write to [email protected] from the email address on your account and we'll close it for you. You can also write to ask what we have about you, or to fix something that's wrong.

How we keep it safe

• The site only works over a secure connection (HTTPS).
• Passwords are scrambled one way, so nobody (us included) can read them.
• Links to set a new password are stored scrambled too, and stop working after 1 hour.
• Photos of notes open only for the parent the note belongs to.

Changes

If we change this policy, we'll update the date at the top. If it's a big change, we'll tell you by email.

Questions

Write to [email protected]. A real person reads every email.