Privacy Policy
Effective August 21, 2026 · Period Plus, LLC
Updated August 21, 2026: we've broadened what your date of birth may be used for. Alongside the 18+ check, we may use it to send you a birthday perk and to understand the age range of our customers. We still don't sell it and don't use it for advertising targeting, and we still only ask for it once.
Updated August 20, 2026: you can now ask us to carry a brand we don't stock. Added that request to “What we collect”. Your email is collected only if you tick the box asking to be told — unticked, no address reaches us — and it is used for that one message, never added to marketing.
Updated August 7, 2026: our phone line is answered by an AI assistant that identifies itself, and calls are recorded — we keep the audio and a transcript. Added voice recordings to “What we collect”, described how long they are kept, and noted that you can email instead if you'd rather not be recorded. (This update also carries the August 4 change that named Quo as our phone provider, which was published without moving the effective date.)
Updated August 2, 2026: Period+ now offers optional measurement through Meta and Google Analytics, which load only if you agree to them. Rewrote “Cookies, analytics and advertising” in full, added Meta to “Who we share it with”, and set out exactly what is and is not sent. Also named Microsoft 365, which has always held our hello@ mailbox.
Updated July 29, 2026: added date of birth and password to “What we collect”, and explained how the 18+ check works.
We sell period products. That means the fact that you're our customer is, itself, personal — and we treat it that way. This policy explains exactly what we collect, why, who we share it with, and how to get it deleted.
The short version
- We never see your card number. Stripe handles payment; we only get the last four digits and expiry.
- We ask before we measure anything. Our measurement and advertising tools don't load at all unless you say yes — and the site works exactly the same if you say no.
- We never share what you bought. If you do say yes, Facebook is told a purchase happened and what it cost. It is never told which products were in your box.
- Nothing on the outside of your box says what's inside it.
- Ask and we'll delete you. One email.
What we collect
| What | Why we need it |
|---|---|
| Email address | Your account identity, sign-in links, order and shipping updates |
| Date of birth | To confirm you're 18 or older, which we're required to do before selling to you. We ask for it once, when you create your account. We may also use it to send you a birthday perk, and to understand the age range of our customers so we can plan what to offer. We do not sell it, and we do not use it for advertising targeting. See Children for how this works when you're buying for a young person. |
| Password | Only if you set one. We never see it — our sign-in provider stores a one-way encrypted version, which cannot be turned back into your password. That's also why we can only ever reset it, never tell you what it is. |
| Name | To address you, and for shipping |
| Shipping address | To send your box |
| Phone number (optional) | Only if you give it — for delivery problems |
| Which products you choose | To pack the right box, and to know how much to order |
| Life stage (optional) | Only if you tell us, so we can suggest products that fit |
| ZIP code from the waitlist | To understand where our customers are and plan shipping |
| Order and shipment history | Support, returns, and your own records |
| Reviews and messages you send us | To publish (reviews, with your permission) and to reply |
| Voice recordings and transcripts of calls | Only if you call us. Our line is answered by an automated assistant that says so and tells you the call is recorded. We keep the audio and a transcript so we can hear what you needed and get back to you. Don't want to be recorded? Email hello@periodplus.us instead. |
| A brand or product you ask us to carry | Only if you use our request form. We keep the brand, the type of product, anything else you tell us, and what you'd filtered to when you asked — so we know what to buy next. Your email is only kept if you tick the box asking us to let you know, and then we use it for that one message and nothing else — we won't add you to our mailing list. Leave the box unticked and we never receive an address at all. |
| Card details | We don't collect these. Stripe does. We see only the last four digits and expiry date. |
How we use it
To send you the boxes you paid for, bill you correctly, answer you when you write, keep your account working, and plan how much product to buy. That's it.
We also use aggregated, de-identified information — like "60% of packs chosen this month were pads" — to decide what to stock. That kind of analysis never identifies you.
Marketing email. If you're a customer or joined our waitlist, we may email you about Period+. Every one of those has an unsubscribe link, and unsubscribing never affects the emails you actually need — order confirmations, shipping notices, and billing.
Who we share it with
We don't sell, rent, or trade your personal information. We share it only with the services that make Period+ work, and only what each one needs:
| Service | What it handles |
|---|---|
| Stripe | Payments, cards, subscriptions, receipts, the billing portal |
| Supabase | Our database — your account, preferences, and order records |
| Netlify | Website hosting |
| Resend | Sending our transactional email |
| Microsoft 365 | Our hello@ mailbox — anything you email us, and our replies, are stored there |
| Quo | Our phone line. Calls are answered by an automated assistant that tells you at the start that it's an AI and that the call is being recorded. We keep the audio recording as well as a written transcript — so whatever you say on the phone is stored there too. Quo also shares recordings with its own service providers, and processes and stores them under its own privacy policy. |
| Cloudflare | Website analytics (no cookies, no cross-site tracking) |
| Meta (only if you agree) | Advertising measurement — that a visit or a purchase happened, and the amount. Never which products. Nothing loads unless you opt in |
| Google Analytics (only if you agree) | How people move around the site, and what's typed into our product search. “Google signals” is switched off and Google Ads is not connected, so it isn't combined with what you do elsewhere. Nothing loads unless you opt in |
| Shipping carriers | Your name and address, to deliver the box |
We may also disclose information if the law requires it, or to protect someone's safety or our legal rights. If Period+ is ever sold or merged, customer information could transfer as part of that — and we'd tell you before it did.
Cookies, analytics and advertising
Nothing that tracks you loads until you agree
We ask once, in a banner at the bottom of the page. Until you answer, and forever if you answer no, the advertising tools below are never loaded — not blocked after the fact, not loaded at all. Signing in, building a box and checking out work identically either way. You can change your mind whenever you like using Your privacy choices at the bottom of any page.Always on
Cloudflare Web Analytics counts page views without cookies and without building a profile of you. Signing in stores a small amount of data in your browser so you stay logged in — that's necessary for the site to work, and it disappears when you sign out. Neither of these follows you to other websites, and neither requires your permission.
Only if you say yes
The Meta pixel (Facebook and Instagram) and Google Analytics. Almost everyone finds Period+ through a Facebook group, and without these we genuinely cannot tell which posts bring people here and which are shouting into the void.
If you agree, they set cookies and record that a device visited our pages, and — if you buy something — that a purchase happened and the amount. Meta may connect that to your Facebook account.
Google Analytics tells us how people move around the site — which pages, in what order, on what kind of device, and what gets typed into our product search. We use it to fix what's confusing and to stock what people are actually looking for. We have deliberately switched off "Google signals," the setting that would let Google combine this with what you do on other websites, and we have not connected Google Ads to it.
What it is never told:
- Which products you chose. We deliberately don't send product names or codes. What absorbency you use is nobody's business but yours, and our systems are built so that information cannot reach an advertising platform even by mistake.
- Your date of birth. We switched off the setting that would have scraped it, along with your name, email and address, from our own forms.
- Anything at all from your account pages. The pixel doesn't run there.
We don't retarget you with ads for products you looked at.
About "selling" your information
We don't sell your personal information for money, and we never will. You should know that some US state privacy laws define "selling" or "sharing" broadly enough to include sending data to an advertising platform like Meta — so if you'd rather that didn't happen, decline the banner, or use Your privacy choices to withdraw. We'll honour it, and nothing about your account or your boxes changes.
Your privacy on the outside of the box
Your box is plain on the outside apart from our name and logo. Nothing on the exterior describes the contents. Our name doesn't appear on your card statement as anything more revealing than the business name.
Children
Period+ accounts are for adults. You must be 18 or older to create an account or buy from us. We do not knowingly collect personal information from children under 13.
Some of our products — like a first-period kit — are intended for a young person but purchased by an adult. In that case the account, the email address, and the information we hold all belong to the adult purchaser. We don't ask for, and don't want, information about the young person who'll use the products. If you believe a child has given us personal information, email us and we'll delete it.
How we check. When you create an account we ask for your date of birth and confirm it shows you're 18 or older. We're relying on what you tell us — we don't verify it against an ID, because asking for identity documents to buy period care would be out of all proportion. Your date of birth is stored once and can't be edited from your account afterwards; if it's wrong, email us and we'll correct it.
How long we keep it
We keep your account and order information while you're a customer, and afterwards only as long as we need it — for warranty and support questions, and to meet tax and accounting rules, which generally means several years for records of what was sold. When we no longer need it, we delete it or strip out anything identifying.
Call recordings and transcripts are held by our phone provider for as long as our account with them is open, and are processed and stored under their own privacy policy. We delete them when we no longer need them.
Brand requests we keep while we're still deciding what to stock. If you gave us an email so we could tell you, we delete the address once we've told you — or once it's clear we won't be carrying it. The request itself stays, without your address, because a count of what people asked for is what we plan around.
Your choices and rights
Whatever state you're in, you can ask us to:
- Show you what personal information we hold about you
- Correct anything that's wrong
- Delete your information (we'll keep only what tax or accounting law requires)
- Stop marketing emails — unsubscribe, or just tell us
Email hello@periodplus.us and we'll take care of it. We won't treat you differently for asking, and we don't charge for it. Depending on where you live, you may have additional rights under your state's privacy law — including the right not to have your data sold, which is easy for us to honor because we don't sell it.
Security
Your account data sits behind per-user access rules, so one customer's account can't reach another's. Card data never touches our systems — Stripe holds it. Our site is served over HTTPS.
No system is perfectly secure, and we won't pretend otherwise. If a breach ever affects your information, we'll tell you promptly and plainly.
Changes to this policy
If we change this policy in a way that matters, we'll email active subscribers and update the effective date at the top. We won't quietly broaden what we do with your information.
Contact
Email hello@periodplus.us, call 334-429-6078, or write to Period Plus, LLC, Enterprise, Alabama. We're a small family business — a real person reads what you send.
If you call us, an automated assistant answers and tells you at the start that it's an AI and that the call is being recorded. We keep the recording and a written transcript. A real person reads it and gets back to you — nobody is listening live. If you'd rather not be recorded, email us at hello@periodplus.us instead and we'll pick it up there.
Make Your Statement.
Period Plus, LLC · Enterprise, Alabama · © 2026 · Terms of Service