Privacy policy

Earned-card check-ins

If you send us an earned-card check-in, you give us your child’s first name, the milestone they reached and any short note you add. We use them only to make and email that card, and delete the check-in once the card is sent.

Newsletter, free sample and free printables

If you sign up for our letter, the free Buzzbeard sample or one of our free printables, we keep your email address, what you signed up for, the page you signed up on and the date in a subscriber list. We use it to email you the download, a few tips for using it, and news about our printables and Calmlings cards. You can unsubscribe at any time, or email support@calmfamilyprintables.com and we’ll delete it.

The Pinterest tag

We share our cards on Pinterest. On our shop pages (the Calmlings gallery, product and collection pages, and the thank-you page after checkout) we ask whether we may use the Pinterest tag. If you say yes, Pinterest sets cookies and we tell it when you view a page or press a Buy button, with the product and list price, so we can see which pins bring visitors and Buy clicks and, if we advertise, show our pins to people likely to be interested. Pinterest handles this under its own privacy policy. We don’t send Pinterest your name or email address.

If you say no, or your browser sends a Global Privacy Control signal, the tag never loads. The tag never runs on our home page, the Visual Schedule Workbook, or our autism, ADHD, NDIS, breathing, earned-card or blog pages. Your answer is kept in this browser (local storage, cfp-consent). You can change it here at any time; saying no also clears the tag’s cookies on this site.

Where a sale came from

When you arrive from a pin or an ad, the link carries a short label (for example utm_source=pinterest). We recognise only approved marketing labels and carry them through links between our public home, guide, product and free-printable pages and to Polar checkout when you press Buy. Our private daily report counts page openings and Buy clicks by these labels. A verified paid-order notice can carry the same labels, so we can count orders by campaign or pin without identifying a visitor. These are event and order counts, not unique people. Labels are not stored in your browser; they can be lost outside this public browsing journey, without JavaScript, across devices or when privacy signals stop forwarding. App, child check-in, private and authentication pages are excluded. A free-printable download redirect may keep the approved label, but no campaign is stored with your email and sign-ups are not counted in this report. This label forwarding does not load the Pinterest tag on home, blog or free-printable pages. We do not send paid-order records to Pinterest.

Counting visits

Our website counts page openings and Buy button events. For each event it adds one to a daily tally made of the page, the label on the link you arrived from (if any), the name of the site that sent you (for example pinterest.com, never the full address), your country and whether you are on a phone, tablet or computer. It sets no cookies, stores nothing in your browser and keeps no IP address or visitor ID, so the tally can’t tell one visitor from another.

Prices in your currency

To show prices in your currency, our pages ask our host, Cloudflare, which country you are visiting from. The answer stays on the page: it isn’t stored or sent anywhere else.

The Calmlings app

The Calmlings app (calmfamilyprintables.com/app) has no ads, no analytics and no cookies, and it doesn’t count visits.

What stays on your device. Which cards your child has met, favourites, sound, bedtime and motion settings, and saved card pictures stay in the app’s own storage on your device. We never receive them.

Your licence key. To unlock cards you enter the licence key from your purchase. Our server (run on Cloudflare) sends the key to Polar, our merchant of record, to check it and to add this device to it (up to 5 devices). Polar keeps a device entry with a label such as “Calmlings app · iPad · Home Screen · 30 Sep 2026”, or a place you pick from a short list, such as “Living room · iPad”. The app never asks for a name. We don’t send Polar your IP address or anything about your child. The app keeps the key on your device so it can check it again every few days (for example, after a refund the extra cards lock again).

What we keep. For each key we keep a coded fingerprint of the key (not the key itself), Polar’s reference for it, which set it unlocks, the device entries added through the app (their labels and the day they were added), and daily counts of new devices, re-checks and device removals, so we can notice a key shared very widely. We keep these for 400 days after the key was last used. When a device is removed, we keep a note of that (the key’s coded fingerprint and Polar’s reference for the device) for about 11 days, so the removed device stops showing cards straight away. We keep no IP address, no email address and nothing about your child. Polar’s answers include your name and email; our server discards them straight away and never stores or logs them.

Card pictures. Card pictures are sent with links that work for only a few minutes. When the app asks for a card picture, our server signs a short-lived link for that card and keeps no record of which card it was.

Moving to the Home Screen on iPhone and iPad. If you unlock in Safari first, we make a one-time code that lets the Home Screen app pick up the same device entry. It lasts 30 minutes, works once, and is stored only in a coded form that can’t be read without the code itself.

Too many tries. To stop abuse, our server counts unlock attempts for a minute at a time using a coded version of your network address that changes every day and is never stored.

Error reports. If something goes wrong inside the app, it sends our server a short, anonymous error report so we can fix the problem: what went wrong (shortened, with anything that looks like a key, a code, a web address, an email address or something typed in the app removed), where in the app’s code it happened, the name of the screen (for example “the book”) and the app’s version. It never includes your licence key, a device or visitor ID, or anything about your child, and we don’t keep your IP address with it. Identical reports from the same day are added up into one count, and we delete them after 90 days. To stop floods, our server counts reports for a minute at a time using the same coded network address, which changes every day and is never stored.

Removing the app. Grown-ups → “Remove the key from this device” frees the device slot at Polar. You can also remove devices on your Polar customer page.

Calmlings cards are educational tools, not therapy or medical advice. Every child is different, so use the cards in whatever way works, alongside the doctors, therapists and teachers who know them.

Updated 6 October 2026.

Private shop measurement

We use our existing Cloudflare hosting database to count shop page openings and Buy clicks in daily totals. These counts are events, not unique people. For verified paid orders, Polar sends a signed order notice to our Cloudflare server. The notice includes customer information while it is checked, but our measurement record keeps only a coded order reference to prevent duplicates, the day, product, currency, total paid amount, billing-country code and any approved marketing labels carried by the checkout. Marketing labels identify the campaign or pin, never a visitor. We do not store the customer's name, email, full address, payment details or children's information in that record. We do not send these purchase records to Pinterest. The coded reference is kept with the measurement record to avoid counting a retried notice twice. Only authorised shop administrators can read the private report.

Our default report omits Nepal and labels unknown country separately. This does not restrict access to our site, app or checkout. The Calmlings app remains free of analytics and visit counting.