Skip to content
Back to PlayPivot

Privacy Policy

What we collect, why, who gets it, and how to see or delete it. Written to match the site as it runs today.

Effective: October 23, 2026 Version 3.4 Your privacy choices

1. The short version

PlayPivot is a free directory of kids' classes, camps, lessons and events in the Las Vegas Valley. It is built for parents and guardians. Business owners can claim their listing.

  • You can browse, search and save programs without an account.
  • When you send an inquiry, it goes to the business you picked, with a copy to our inbox.
  • We never ask for your child's name. The only child details we hold are ones a parent types in, like an age or an interest.
  • We do not sell your personal information.
  • Signed-in parents can download or delete their data from the Parent Portal. Anyone can email help@playpivot.org.

This policy covers playpivot.org and the emails we send. There is no PlayPivot mobile app.

2. What we collect and why

Here is the full list, grouped by who you are. If it is not on this list, we do not collect it.

Everyone who visits

WhatWhyWhere it goes
Request logs: your IP address, browser type and the pages you ask forKeep the site running and stop abuse. Our rate limiter counts requests per IP address for up to an hour.Vercel (our host) keeps request logs. Rate-limit counters live briefly in Upstash Redis.
Listing activity: which listing you opened, and taps on buttons like call, website, message or claimShow each business how its listing is doing, and show us which parts of a page help parents.Our database. Known crawler traffic is dropped first. If you are signed in, taps on a listing page are saved with your account id.
Searches that found nothing: the words you searched and the cityFind activities we are missing.Our database, with no account id.
Location, only if you allow your browser's location promptSort programs by distance and pick your city.Your coordinates pass through our server so it can look up your city. We round them to about 100 meters before asking Google, and we do not save them in our database. Your browser keeps the city and coordinates in local storage.
Kids' ages for the quick filter, your My List saves, recent searches and recently viewed listingsOne-tap filters and saves without an account.Your browser's local storage only. Signed-in parents can sync ages and saves to their account.
Match My Child: the sentence you type, plus the age and city we read from itPick the activity categories to show you, and improve how we read requests.Our database, with no account id. If our own matching cannot place your sentence, it is sent to an AI model to choose categories (see Who we share it with).
Inquiries to a business, from a listing page or Match My Child: your name, email, optional phone, whether a business may call you, your child's age, skill level and your question, plus which PlayPivot page you sent it from and how you got to us (see Cookies, analytics and error reports)Get your inquiry to the business you picked, and see which of our pages help parents find a program.Our database, and emailed to that business (see Who we share it with). If you are signed in, the inquiry also shows in your Parent Portal.
Newsletter: your email, your city, which signup box you used, and the link or website that first brought you to PlayPivot, if there was oneSend The Weekly, our events email, and see which signup boxes, partners and posts bring parents in.Our database. Emails are sent through Resend.
Reviews and star ratings: your rating, what you write, and the name you givePublish reviews after a person checks them.Our database. Shown publicly with the name you gave once approved. Signed-in reviews are linked to your account.
Contact form: your name, email and messageAnswer you.Emailed to our inbox through Resend. Not stored in our database.
Event submissions and listing reports: what you tell us, and a contact email if you give oneCheck and publish the event, or fix the listing.Our database.

Parents with an account

WhatWhyWhere it goes
Sign-in details: email, password, first and last name. Or your Google name and email if you sign in with Google.Create and protect your account.Supabase Auth. Passwords are stored hashed by Supabase. We never see them.
Family profile: zip code, your children's ages and interests, and the date and version of your consentFilter results to your kids and post match alerts for events that fit them.Our database. Only your own signed-in session can read your row.
Consent record: what you agreed to or withdrew, the policy version, your IP address and browser string at that momentKeep proof of your choice.Our database.
Favorites, alerts, business replies to your inquiries, and your digest settingRun the Parent Portal and your private calendar feed.Our database.
Questions you ask on a listing, and photos you upload of a placeShare them with other parents.Questions stay hidden until a person approves them. Photos are checked by an AI model (Google Gemini) and may appear right away if it finds nothing wrong; otherwise a person reviews them. Both are public once shown.

Business owners

WhatWhyWhere it goes
Sign-in details: email, password, first and last name, and the role you pickedGive you the Business Portal.Supabase Auth.
Claim details: your name and phone, a record of each claim step, and the link or website that first brought you to PlayPivot, if there was oneConfirm you speak for the business, and see which partners bring businesses in.Our database. The verification code goes by text or call to the phone number already on the listing, through Twilio.
Verification documents, such as a business license or photo ID, when we ask for themCheck a claim we could not confirm by phone.A private storage bucket. Staff open them through links that expire. They are never public.
Billing: your Stripe customer and subscription ids and your plan statusRun a paid plan.Stripe holds your card details. We keep only the ids and the status.
Listing content, photos, schedules and your replies to parentsRun your listing.Our database and public file storage. Replies are emailed to the parent.
The public contact email for a businessDeliver parent inquiries and invite the business to claim its listing.Our database. Every lead and outreach email has a one-click unsubscribe link.

What we do not collect: children's names, emails, phone numbers or birthdays, payment card numbers (Stripe holds those), or a location history. We do not read your contacts or device identifiers.

3. Information about children

PlayPivot is for parents, guardians and business owners. It is not directed to children under 13, and accounts are meant for adults. We do not knowingly collect personal information from a child under 13. If you think a child has given us information, email help@playpivot.org and we will delete it.

The only information about children on PlayPivot is what a parent chooses to enter:

  • Ages and interests in the Parent Portal or the "My kids" quick filter. Saving them to your account takes a parent or guardian confirmation, and you can withdraw it at any time.
  • A child's age in an inquiry. It goes to the business with your inquiry.
  • Match My Child asks what your child is looking for, not who they are. There is no name field. We read an age and a city from your sentence if you include them.
  • Anything you type into a question, review or inquiry. Please leave out children's names, birthdays and photos. Reviews and questions are public once approved.

Where it goes: inquiries (with the age) go to the business and our inbox. A Match My Child sentence may be read by Anthropic or Google Gemini when our own matching cannot place it. Nightly match alerts are worked out on our own servers. We do not build ad profiles of children and we never sell any of this.

4. Who we share it with

We share information in three ways: with the business you contact, with the companies that run parts of the site for us, and when the law requires it.

The business you contact. Your inquiry, with your name, contact details, your child's age and your question, is emailed to the business you picked. If the business has claimed its listing, it goes to the owner's inbox and dashboard. If not, it goes to the business's public email when we have one, with a copy to our inbox, or we forward it by hand. Once a business has it, the business handles it under its own practices.

Companies that run parts of the site. Each one gets only what it needs for the job listed here.

  • Supabase. Database, sign-in and file storage. Everything above that says "our database" lives here.
  • Vercel. Hosts the site and runs our scheduled jobs. Sees request logs, including IP addresses. Vercel Speed Insights measures how fast pages load on about half of page views.
  • Sentry. Error reports when something breaks on the site. Set up so it does not receive cookies or form contents, and it does not record your screen.
  • Upstash. Short-lived rate-limit counters keyed by IP address.
  • Resend. Sends every email we send: The Weekly, inquiries to businesses, review follow-ups, claim emails and contact form messages.
  • Google Analytics. Counts page views and site events. Sets analytics cookies.
  • Google AdSense. Ad code that loads on our pages and sets advertising cookies (see We do not sell your information).
  • Google Maps Platform. Maps on listing and search pages (Google receives your IP address when a map loads), and turning a city or rounded location into map coordinates. We also pull hours, photos and ratings about businesses from Google Places; that data is about businesses, not you.
  • Google sign-in. Optional. If you use it, Google sends us your name and email.
  • Google Gemini. AI model. Checks uploaded photos, reads a Match My Child sentence when our other options cannot, can write a weekend plan from a signed-in parent's profile, and helps owners and staff draft listing and article text.
  • Anthropic (Claude). AI model. Our first choice for reading a Match My Child sentence our own matching cannot place, and it suggests listing text for business owners.
  • Twilio. Sends the verification code during a business claim.
  • Stripe. Billing for business plans. Card details go straight to Stripe.
  • Amazon. Gear links in our guides are affiliate links. Clicking one takes you to Amazon and we may earn a commission. We send Amazon nothing about you.

Legal requests. We will hand over information if a court order or the law requires it, and we will tell you when we are allowed to.

5. We do not sell your information

We do not sell personal information and never have. We do not give your account, inquiries or family profile to advertisers or data brokers.

Ad cookies. Google AdSense code loads on our pages and sets advertising cookies, and Google may use them to pick ads. Some state laws can count that as "sharing" for ads. To turn it off, use Google Ads Settings or block third-party cookies in your browser. To opt out of personalized ads from Google and other participating ad companies at once, use the Digital Advertising Alliance's YourAdChoices opt-out tool. aboutads.info explains how it works. Google explains what it does with data from sites like ours in How Google uses data when you use our partners' sites or apps. How ads fit into how we pay for the site is on How PlayPivot makes money. Visitors in the EEA, UK and Switzerland get these cookies switched off by default.

Nevada residents. Under Nevada law (NRS 603A) you can ask us not to sell your covered information. We do not sell it, but you can still send a request. Our designated address for these requests is help@playpivot.org. We will record it and confirm in writing within 60 days.

California residents. When the California Consumer Privacy Act applies to us, you have the right to know what we hold about you, to get a copy, to correct it, to delete it, and to tell us not to sell or share it, and we will not treat you differently for asking. We do not sell it. For ad cookies, use the opt-outs above, or email us and we will record your request. You can name someone to make a request for you if they can show you authorized it.

Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as your request to opt out of the sale or sharing of your information for ads. On that browser we tell Google not to use your visit for personalized ads and ask AdSense for ads that are not personalized. Ads can still appear. The signal covers only the browser that sends it, so email us if you want an opt-out recorded for you everywhere.

6. Cookies, analytics and error reports

Cookies we set. When you sign in, Supabase sets cookies that keep you signed in. If you open a private link from one of our emails (a message link for a business, or a schedule check link), we set a cookie that keeps that link working, for 14 days for message links and 30 days for schedule links. It holds the link's code, nothing else, and is not readable by scripts on the page. We also set one small cookie, pp_ft, when you arrive from a link we tagged or from another website. It holds the tags on that link and the name of the site that sent you, and nothing else, and lasts 30 days. If you join The Weekly or start a claim in that time, we save those two things with the signup. It goes to no one else and is not set in our events widget on partner websites or in a browser that sends Global Privacy Control. That is all we set ourselves.

Where an inquiry came from. When you send an inquiry, we save which PlayPivot page you sent it from, the first PlayPivot page of that visit, the name of the site that sent you (like google.com, never the full address or what you searched) and any campaign tag on our own links (like a link in The Weekly). Your browser keeps that first page in session storage until you close the tab. It is not a cookie, and it stays in your browser unless you send an inquiry. We use it to see which pages help parents, nothing else.

Google cookies. Google Analytics and Google AdSense load on our pages and set their own cookies. We do not show a cookie banner. In the EEA, UK and Switzerland, analytics and ad storage are off by default and ads are not personalized. Everywhere else they are on by default. If your browser sends Global Privacy Control, ads on that browser are not personalized (see Global Privacy Control). You can turn them off with the links in Your privacy choices. Google explains its side in How Google uses data when you use our partners' sites or apps. Our Cookie Policy has the general categories.

Page speed. Vercel Speed Insights measures how fast pages load on about half of page views. It does not set cookies.

Error reports. When a page or server request breaks, Sentry gets a report with the error, the page and your browser type so we can fix it. We set it up not to send cookies or form contents, and it does not record your screen.

Local storage. Your browser keeps a few things on your device so the site works without an account: kids' ages for the quick filter, My List, recent searches, recently viewed listings, the city you picked or we found (and coordinates, if you allowed location), and a note that the newsletter pop-up was shown. Clear your browser's site data to remove it.

Do Not Track. The site does not respond to this browser signal.

7. Your privacy choices

  • See or download your data

    In the Parent Portal, choose "Export your data". You get a file with your profile, favorites, inquiries with every message in each conversation, reviews, photos you uploaded (with where each file is stored), questions you asked on a listing page, alerts, consent history and newsletter status. Questions on the Parent Q&A board are not tied to an account, so they are not in the file. Email help@playpivot.org and we will look for them.

  • Delete your account

    In the Parent Portal, choose "Delete my profile" and type DELETE. We remove your login, family profile, favorites and alerts, the messages you wrote to businesses, and the photos you uploaded (the files and our records of them), and unsubscribe your email. Inquiries you sent already went to the business, so we keep the inquiry and the business's replies but remove your name, email and phone from our copy. Message copies a business already got by email stay with the business. Reviews stay up because they help other parents, but they are unlinked from your account and your name is removed, so they show as A PlayPivot parent. Business owner accounts carry listings, so email help@playpivot.org and we will close those by hand.

  • Remove your children's details but keep the account

    In the Parent Portal, choose "Withdraw consent and remove children's data". Ages and interests are cleared and match alerts stop.

  • No account?

    Email help@playpivot.org and tell us what you sent us (an inquiry, a review, a newsletter signup) and the email you used. We will tell you what we hold and delete it if you ask.

  • Emails

    Every issue of The Weekly has a one-click unsubscribe link, and signed-in parents can turn it off in the Parent Portal. We send at most one email a week. After you send an inquiry, we may ask how it went: inside The Weekly if you get it, otherwise in one email a couple of weeks later. That email is sent once per inquiry and has a link to stop all emails from us. Businesses can stop lead emails with the unsubscribe link in each one.

  • Ads and analytics

    Turn off personalized ads at Google Ads Settings or with the YourAdChoices opt-out tool (aboutads.info), install the Google Analytics opt-out add-on, turn on Global Privacy Control in your browser, or block third-party cookies in your browser. Read How Google uses data when you use our partners' sites or apps for how Google uses this data.

  • Location

    Say no to the browser's location prompt and type a city instead. You can change the permission in your browser settings at any time.

  • Do not sell or share

    See We do not sell your information for Nevada and California requests.

For anything else, like correcting your information, email help@playpivot.org. We confirm requests by replying to the email address we have for you, and we answer within 30 days.

8. How long we keep things

  • Account data stays while your account is open and goes when you delete it.
  • Inquiries stay so the business can see them. When you delete your account, your name, email and phone come off our copy and the messages you wrote are deleted; your first question, your child's age and the business's replies stay. Emails already delivered to a business or our inbox cannot be pulled back.
  • Photos you upload stay up until you delete your account. Then the files and our records of them are deleted.
  • Reviews stay published until you or the business asks us to look at them.
  • Consent records are deleted with your account. One row with no name records that a deletion happened.
  • Newsletter and email opt-outs stay on file with the date, so we do not email you again by mistake.
  • The link or website that brought you here is kept with your newsletter signup, claim or inquiry for as long as that record exists. The cookie that carries it lasts 30 days.
  • Listing activity, searches that found nothing, and Match My Child sentences are kept. Most carry no account id.
  • Verification documents are kept while a claim is open. Once it is decided, email help@playpivot.org and we will delete them.
  • Request logs, analytics and error reports are kept by Vercel, Google and Sentry under their own retention settings.
  • Stripe records are kept as long as tax and accounting rules require.

9. Security

All traffic to the site uses HTTPS. Passwords are handled by Supabase and stored hashed. Our database host encrypts data at rest. Parent profiles are protected so only your own signed-in session can read them. Verification documents sit in a private bucket that only staff can open, through links that expire. Staff pages need a separate admin sign-in. Unsubscribe and rating links in our emails are signed, so they only work for the person we sent them to.

No site can promise perfect security. If you find a problem, email help@playpivot.org and we will look at it right away.

10. Changes to this policy

When we add a feature that collects something new or sends data somewhere new, we update this page, change the version number and update the effective date at the top.

Questions?

Email us about anything on this page, your data, or your children's data. A person reads every message.

help@playpivot.org

PlayPivot
209 S Stephanie St, Ste B, Henderson, NV 89012

Terms of Use|Cookie Policy|Accessibility