Legal
Privacy Policy
Last updated · May 15, 2026
Thread is a subscription product built from your family's own photos and memories. That puts us in a position of trust we take seriously. This policy explains, in plain language, what we collect, why, and what control you have over it.
1. Who we are
"Thread," "we," "us," and "our" refer to Thread, Inc., located at 3500 Piedmont Rd NE, Suite 330, Atlanta, GA 30305. You can reach our privacy team at [email protected].
2. Information we collect
Account & order information
Your name, email address, shipping address, billing address, and phone number (if provided). The name and age of the parent or recipient the box is for.
Payment information
Card details are collected and processed by Stripe, our payment processor. Thread never sees or stores your full card number. We retain only the last four digits and the card brand for receipt and support purposes.
Family content
The photos, memories, place names, and personal details you provide so we can build a personalized box. If you connect Apple Photos or Google Photos, we access only the photos and metadata you explicitly grant access to. We do not crawl, post, or share these photos. They are used only to assemble your boxes.
Usage information
How you interact with our website and emails: pages visited, links clicked, device type, IP address, approximate location, and referral source. Collected via cookies, pixels, and similar technologies.
Communications
Your messages to our support team, and your responses to surveys or feedback requests.
3. How we use it
- To fulfill your subscription: personalize each box from the photos and details you provide, print and ship, and bind the annual Thread Book.
- To process payments and prevent fraud, through Stripe.
- To communicate about your subscription, shipping, account, and product updates.
- To improve Thread, by analyzing aggregated usage patterns. Family content is never used in this analysis.
- To advertise responsibly: we may show ads on Meta (Facebook, Instagram), Google, and similar platforms. We use the Meta Pixel and Google's advertising tools to measure ad performance. We do not share your family photos or memories with advertising platforms.
- To comply with law when required.
4. Who we share it with
We share information only with vendors who help us run Thread, and only the minimum they need:
- Stripe — payment processing and subscription management.
- Fulfillment and printing partners — to print, assemble, and ship your boxes and the annual Thread Book.
- Email and customer support tools — to send transactional and account messages.
- Analytics and advertising platforms — Meta, Google, and similar platforms, for non-content data only (page views, clicks, conversion events).
- Cloud hosting — for storing your account information and the photos you upload, behind industry-standard encryption.
We do not sell your personal information. We do not rent it. We do not share your family photos or written memories with any third party for any purpose other than producing your boxes.
5. How long we keep it
We keep account and order information for as long as your subscription is active, and for up to seven years after cancellation for tax, accounting, and dispute-resolution purposes.
We keep the family content you upload for as long as you're subscribed plus six months after, so that if you reactivate, your Thread Book can resume where it left off. You can ask us to delete it sooner — see section 8.
6. Children
Thread is sold to adults and made for older adults. We do not knowingly collect information from children under 13. If we learn we have, we will delete it.
7. International users
Thread is operated from the United States. If you use Thread from outside the U.S., your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your country.
8. Your rights
Regardless of where you live, you can:
- Ask us what personal information we have about you.
- Ask us to correct or update it.
- Ask us to delete it (subject to legal retention requirements).
- Ask us to export it in a portable format.
- Withdraw consent for analytics or marketing communications at any time.
California residents have additional rights under the CCPA, including the right to know what categories of information we collect and the right to opt out of any sale of personal information (which we do not do). EU/UK residents have rights under GDPR including the rights above plus the right to object to processing and the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
9. Cookies & similar technologies
We use cookies and similar technologies to keep you logged in, remember your preferences, measure site performance, and (with your consent where required) measure advertising performance. You can disable cookies in your browser, though parts of Thread may not work correctly without them.
10. Security
We use industry-standard encryption in transit (TLS) and at rest, restricted-access cloud hosting, and least-privilege access controls for employees and contractors. No system is perfectly secure, but we take this seriously, especially given the sensitivity of family photos.
11. Changes to this policy
If we make material changes, we'll notify subscribers by email at least 14 days before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent revision.