Data controller
B.D.D.R., 9 B route de Saint-Cézaire, 06530 Spéracèdes, France. Contact: contact@malistenaissance.fr.
Data, purposes and retention periods
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Baby registries | First name or chosen name, message, cover image, due date and optional birth information (date, time, weight, length, sex), gifts (title, link, price, photo, note, options) | Performance of the service | Until the list or account is deleted |
| Reservations, group gifts and messages | Technical browser identifier (hashed), first name and optional email of participants, optional message revealed to parents at birth | Performance of the service | Until the list is cancelled or deleted |
| List link and 'empty list' reminder | Email address optionally provided when creating a list without an account, or to receive its link | Consent | Deleted after the reminder is sent, and at the latest 15 days after the list is created |
| Contact messages | First name, email address, subject and message sent from the contact page | Legitimate interest (responding to your request) | 2 years after sending |
| Account | Name and email address; irreversibly encrypted password (PBKDF2) for an email account, or profile photo and identifier provided by Google or Facebook; notification preferences | Performance of the service | Until the account is deleted; sessions: 90 days |
| Reminders before the birth | Confirmed email address of a loved one subscribed to a list | Consent (double confirmation) | Until unsubscribed; unconfirmed requests deleted after 30 days |
| Baby pool | First name of participants, their predictions (date, time, weight, length, sex, baby's name) and optional email to receive the result | Service performance; consent for the email | Until the registry or predictions are deleted by the parents; email erased 6 months after the birth announcement (18 months maximum) |
| Online birth announcement | Baby's first name, date, time, weight and length, photo and message chosen by the parents | Performance of the service | Until the announcement or registry is deleted |
| List co-management | Co-manager accounts, invitations (email optional) | Performance of the service | Invitations: 14 days; access: until withdrawn |
| Blog: comments and ratings | First name, optional email (not published), comment; hashed IP address fingerprint against spam | Legitimate interest (moderation, anti-spam) | Comment: until deleted; IP fingerprint: 12 months |
| Genie (gift ideas) | Description entered, sent to the AI service to generate ideas; not stored by the site | Performance of the service | Not stored |
| Security and anti-abuse | Hashed IP address fingerprints, Turnstile verification, technical error logs | Legitimate interest (security) | Rate limits: 24 hours; errors: 90 days with the provider |
| Statistics | Daily totals without personal data | Legitimate interest | Unlimited (anonymous data) |
Who sees what?
Anyone with a registry's sharing link can view it: only share it with your loved ones. Messages left by loved ones stay hidden until the birth (or, failing that, until the due date). Registries are not indexed by search engines. The registry manager sees which gifts are reserved, unless they enable surprise mode. They don't know by whom, unless they enable the “See who reserved” option: the first name given at reservation is then shown to them, as indicated on the reservation form. The organiser of a group gift sees the first names and emails of participants to coordinate. Don't include sensitive information in your registries. The Ma Liste de Naissance team may view a registry only for support, moderation of reported content or a deletion request.
Processors and transfers outside the European Union
- Hostinger (European Union) : Hosting of the website, database and images
- Cloudflare (United States) : Turnstile anti-bot protection on certain forms
- Google, Meta (Facebook) : Account login, if you choose it
- Twilio SendGrid (United States) : Sending emails (notifications, reminders, invitations, birth announcement)
- Anthropic (United States) : Artificial intelligence for the Genie and blog writing assistance
- OpenAI, Tavily (United States) : Illustrations and sources for blog articles (back-office only)
- Amazon : Product search and affiliate links
- Sentry (United States) : Technical error tracking
Transfers to the United States are governed by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
E-mails
You only receive emails linked to an action: reservation notification (account, can be disabled in “My account”), reservation confirmation, reminders before the birth if you confirmed them, invitations, predictions and birth announcement. Every reminder includes an unsubscribe link.
Browser extension
The “Ma Liste de Naissance - Add to my registry” extension (Chrome, Edge, Firefox) only works when you click its icon or “Add to my baby registry” in the right-click menu. It then reads, on the displayed page only, the product's name, price, image and address, then opens our site's pre-filled add window. Nothing is saved until you confirm the addition; the data saved is then that of the gift, in your registry. The extension does not read your browsing history, does not run in the background, contains no tracker and does not share any data with third parties.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. You can delete a list yourself ("Customise" then "Delete this list") or your account and all its lists ("My account"). For any other request: contact@malistenaissance.fr. If you encounter any difficulty, you can contact the CNIL (cnil.fr).
Cookies
Only cookies necessary for the service are used: see the cookies page.
Security
Encrypted connection (HTTPS), private links and random sessions stored in hashed form, protection against bots and abuse, daily backups encrypted at rest, sanitised article content.
Last updated: 20 octobre 2026.
Manage my lists