Privacy

Last updated: 16-10-2026

Wiegklaar is a planner for parents-to-be. This page explains, in plain words, what we keep, why, where and for how long, and what you can do about it.

Who we are

Wiegklaar is run by Koray Devecioglu in the Netherlands, who decides what happens with your data (the “controller” in privacy law). Questions or requests: team@wiegklaar.nl.

What we keep

• Your account: your name, email address, your role in the household, when you joined and the last day you used Wiegklaar.
• Your plan: everything you and your household add: the shopping list with products and prices, to-dos, appointments, notes, the leave plan, daycare options, the baby book and the due date. Some of this is about your pregnancy and health.
• Signing in: a scrambled fingerprint (hash) of your session, never the session itself; a hash of a sign-in code for 10 minutes; and, if you use Google, which Google account signed in.
• Emails we send you: which ones and when (welcome, invitation, reminder, sign-in code).
• Usage counts: daily totals, such as how many items a household has, never what they say.
• Technical logs: whether requests worked and error messages, kept for a few days, never the contents of your plan.
• The waitlist: if you join it on this website, your email address and a few details about signing up (see The waitlist below).

We don’t keep salaries or income (the daycare calculator works it out in your browser and never sends it), passwords (there are none), or anything for advertising or tracking.

Why, and on what basis

• To run the planner you asked for (GDPR article 6(1)(b): carrying out our agreement with you).
• Your pregnancy and health details only with your explicit consent (article 9(2)(a)), which we ask for before your plan opens. To withdraw it, an owner deletes the household; anyone else writes to us and we take them out of it.
• To keep Wiegklaar safe and stop misuse, with logs, limits on sign-in attempts and a bot check (article 6(1)(f): our legitimate interest).

Who can see it

• Your household: everyone in it sees the whole plan.
• The person who runs Wiegklaar sees your household’s name, who’s in it, your shopping list and prices (to run the morning price checks) and how many to-dos and appointments you have, never what they say, your notes, the baby book or the due date. They can’t change your plan.
• Nobody else. We never sell your data or use it for ads.

Where it’s stored, and who helps us

These companies process data for us, under contracts that oblige them to protect it:

• Cloudflare runs Wiegklaar. The database is stored in the EU. Cloudflare also sends our emails and runs the bot check (Turnstile) on the sign-in form.
• Google, only if you choose “Sign in with Google” (Google then knows you signed in to Wiegklaar), and because email sent to team@wiegklaar.nl arrives in a Gmail inbox.
• GitHub holds Wiegklaar’s code and, during each update, an encrypted backup copy for up to 90 days.

Some of these companies are based in the United States. Transfers there are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses. Before every update we make an encrypted backup. It’s kept for up to 90 days at Cloudflare and at GitHub, then deleted.

The waitlist

When you join the waitlist on wiegklaar.nl, we keep your email address, the language of the form, which link brought you (for example a post on Reddit) and when you signed up. We use it only to invite you to Wiegklaar, and we don’t send anything else. This is based on your consent (GDPR article 6(1)(a)). To withdraw it, write to team@wiegklaar.nl and we delete your address.

The list is kept in its own database at Cloudflare in the EU, apart from the planner. The person who runs Wiegklaar can see it. We delete your address once you’ve been invited, or at the latest 12 months after you signed up. To stop misuse, the form counts sign-ups per internet connection for a minute; that IP address isn’t stored.

How long we keep it

• As long as your household uses Wiegklaar.
• When an owner deletes the household, everything is removed from Wiegklaar straight away, and from the backups within 90 days.
• Sign-in codes: 10 minutes. Sessions: 30 days after you last used Wiegklaar. Invitation links: 14 days. Logs: a few days. The waitlist: until you’re invited, at most 12 months.

Cookies

The planner only uses cookies that keep you signed in: one for your session, for 30 days, and a short-lived one while you sign in with Google. While some pages still use Cloudflare’s sign-in, Cloudflare sets its own sign-in cookie. This website, wiegklaar.nl, uses no cookies at all. There are no analytics or advertising cookies, so there’s no cookie banner. Joining the waitlist sets no cookie either. If you switch the site to dark, that choice is remembered in your own browser and never sent to us.

Your rights

• See and copy your data: “Export backup” in “Our household” gives you everything as a file.
• Correct it in the planner, or ask us.
• Delete it: an owner can delete the whole household in “Our household”, or ask us to.
• Restrict or object to how we use it, and withdraw your consent.
• Complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Write to team@wiegklaar.nl. We answer within a month.

Security

Everything travels over HTTPS. Sign-in sessions and codes are stored only as hashes, backups are encrypted, and our own admin accounts use two-step sign-in. That’s care, not a promise that nothing can ever go wrong. If something does go wrong with your data, we tell you, and where the law requires it the Autoriteit Persoonsgegevens, within 72 hours.

Changes

When this page changes, the date at the top changes too. For important changes we tell you in Wiegklaar or by email.