Privacy Policy
What we collect, why, who gets it, and how to see or delete it. Written to match the site as it runs today.
1. The short version
PlayPivot is a free directory of kids' classes, camps, lessons and events in the Las Vegas Valley. It is built for parents and guardians. Business owners can claim their listing.
- You can browse, search and save programs without an account.
- When you send an inquiry, it goes to the business you picked, with a copy to our inbox.
- We never ask for your child's name. The only child details we hold are ones a parent types in, like an age or an interest.
- We do not sell your personal information.
- Signed-in parents can download or delete their data from the Parent Portal. Anyone can email help@playpivot.org.
This policy covers playpivot.org and the emails we send. There is no PlayPivot mobile app.
2. What we collect and why
Here is the full list, grouped by who you are. If it is not on this list, we do not collect it.
Everyone who visits
| What | Why | Where it goes |
|---|---|---|
| Request logs: your IP address, browser type and the pages you ask for | Keep the site running and stop abuse. Our rate limiter counts requests per IP address for up to an hour. | Vercel (our host) keeps request logs. Rate-limit counters live briefly in Upstash Redis. |
| Listing activity: which listing you opened, and taps on buttons like call, website, message or claim | Show each business how its listing is doing, and show us which parts of a page help parents. | Our database. Known crawler traffic is dropped first. If you are signed in, taps on a listing page are saved with your account id. |
| Searches that found nothing: the words you searched and the city | Find activities we are missing. | Our database, with no account id. |
| Location, only if you allow your browser's location prompt | Sort programs by distance and pick your city. | Your coordinates pass through our server so it can look up your city. We round them to about 100 meters before asking Google, and we do not save them in our database. Your browser keeps the city and coordinates in local storage. |
| Kids' ages for the quick filter, your My List saves, recent searches and recently viewed listings | One-tap filters and saves without an account. | Your browser's local storage only. Signed-in parents can sync ages and saves to their account. |
| Match My Child: the sentence you type, plus the age and city we read from it | Pick the activity categories to show you, and improve how we read requests. | Our database, with no account id. If our own matching cannot place your sentence, it is sent to an AI model to choose categories (see Who we share it with). |
| Inquiries to a business, from a listing page or Match My Child: your name, email, optional phone, whether a business may call you, your child's age, skill level and your question, plus which PlayPivot page you sent it from and how you got to us (see Cookies, analytics and error reports) | Get your inquiry to the business you picked, and see which of our pages help parents find a program. | Our database, and emailed to that business (see Who we share it with). If you are signed in, the inquiry also shows in your Parent Portal. |
| Newsletter: your email, your city, which signup box you used, and the link or website that first brought you to PlayPivot, if there was one | Send The Weekly, our events email, and see which signup boxes, partners and posts bring parents in. | Our database. Emails are sent through Resend. |
| Reviews and star ratings: your rating, what you write, and the name you give | Publish reviews after a person checks them. | Our database. Shown publicly with the name you gave once approved. Signed-in reviews are linked to your account. |
| Contact form: your name, email and message | Answer you. | Emailed to our inbox through Resend. Not stored in our database. |
| Event submissions and listing reports: what you tell us, and a contact email if you give one | Check and publish the event, or fix the listing. | Our database. |
Parents with an account
| What | Why | Where it goes |
|---|---|---|
| Sign-in details: email, password, first and last name. Or your Google name and email if you sign in with Google. | Create and protect your account. | Supabase Auth. Passwords are stored hashed by Supabase. We never see them. |
| Family profile: zip code, your children's ages and interests, and the date and version of your consent | Filter results to your kids and post match alerts for events that fit them. | Our database. Only your own signed-in session can read your row. |
| Consent record: what you agreed to or withdrew, the policy version, your IP address and browser string at that moment | Keep proof of your choice. | Our database. |
| Favorites, alerts, business replies to your inquiries, and your digest setting | Run the Parent Portal and your private calendar feed. | Our database. |
| Questions you ask on a listing, and photos you upload of a place | Share them with other parents. | Questions stay hidden until a person approves them. Photos are checked by an AI model (Google Gemini) and may appear right away if it finds nothing wrong; otherwise a person reviews them. Both are public once shown. |
Business owners
| What | Why | Where it goes |
|---|---|---|
| Sign-in details: email, password, first and last name, and the role you picked | Give you the Business Portal. | Supabase Auth. |
| Claim details: your name and phone, a record of each claim step, and the link or website that first brought you to PlayPivot, if there was one | Confirm you speak for the business, and see which partners bring businesses in. | Our database. The verification code goes by text or call to the phone number already on the listing, through Twilio. |
| Verification documents, such as a business license or photo ID, when we ask for them | Check a claim we could not confirm by phone. | A private storage bucket. Staff open them through links that expire. They are never public. |
| Billing: your Stripe customer and subscription ids and your plan status | Run a paid plan. | Stripe holds your card details. We keep only the ids and the status. |
| Listing content, photos, schedules and your replies to parents | Run your listing. | Our database and public file storage. Replies are emailed to the parent. |
| The public contact email for a business | Deliver parent inquiries and invite the business to claim its listing. | Our database. Every lead and outreach email has a one-click unsubscribe link. |
What we do not collect: children's names, emails, phone numbers or birthdays, payment card numbers (Stripe holds those), or a location history. We do not read your contacts or device identifiers.
3. Information about children
PlayPivot is for parents, guardians and business owners. It is not directed to children under 13, and accounts are meant for adults. We do not knowingly collect personal information from a child under 13. If you think a child has given us information, email help@playpivot.org and we will delete it.
The only information about children on PlayPivot is what a parent chooses to enter:
- Ages and interests in the Parent Portal or the "My kids" quick filter. Saving them to your account takes a parent or guardian confirmation, and you can withdraw it at any time.
- A child's age in an inquiry. It goes to the business with your inquiry.
- Match My Child asks what your child is looking for, not who they are. There is no name field. We read an age and a city from your sentence if you include them.
- Anything you type into a question, review or inquiry. Please leave out children's names, birthdays and photos. Reviews and questions are public once approved.
Where it goes: inquiries (with the age) go to the business and our inbox. A Match My Child sentence may be read by Anthropic or Google Gemini when our own matching cannot place it. Nightly match alerts are worked out on our own servers. We do not build ad profiles of children and we never sell any of this.
5. We do not sell your information
We do not sell personal information and never have. We do not give your account, inquiries or family profile to advertisers or data brokers.
Ad cookies. Google AdSense code loads on our pages and sets advertising cookies, and Google may use them to pick ads. Some state laws can count that as "sharing" for ads. To turn it off, use Google Ads Settings or block third-party cookies in your browser. To opt out of personalized ads from Google and other participating ad companies at once, use the Digital Advertising Alliance's YourAdChoices opt-out tool. aboutads.info explains how it works. Google explains what it does with data from sites like ours in How Google uses data when you use our partners' sites or apps. How ads fit into how we pay for the site is on How PlayPivot makes money. Visitors in the EEA, UK and Switzerland get these cookies switched off by default.
Nevada residents. Under Nevada law (NRS 603A) you can ask us not to sell your covered information. We do not sell it, but you can still send a request. Our designated address for these requests is help@playpivot.org. We will record it and confirm in writing within 60 days.
California residents. When the California Consumer Privacy Act applies to us, you have the right to know what we hold about you, to get a copy, to correct it, to delete it, and to tell us not to sell or share it, and we will not treat you differently for asking. We do not sell it. For ad cookies, use the opt-outs above, or email us and we will record your request. You can name someone to make a request for you if they can show you authorized it.
Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as your request to opt out of the sale or sharing of your information for ads. On that browser we tell Google not to use your visit for personalized ads and ask AdSense for ads that are not personalized. Ads can still appear. The signal covers only the browser that sends it, so email us if you want an opt-out recorded for you everywhere.
7. Your privacy choices
See or download your data
In the Parent Portal, choose "Export your data". You get a file with your profile, favorites, inquiries with every message in each conversation, reviews, photos you uploaded (with where each file is stored), questions you asked on a listing page, alerts, consent history and newsletter status. Questions on the Parent Q&A board are not tied to an account, so they are not in the file. Email help@playpivot.org and we will look for them.
Delete your account
In the Parent Portal, choose "Delete my profile" and type DELETE. We remove your login, family profile, favorites and alerts, the messages you wrote to businesses, and the photos you uploaded (the files and our records of them), and unsubscribe your email. Inquiries you sent already went to the business, so we keep the inquiry and the business's replies but remove your name, email and phone from our copy. Message copies a business already got by email stay with the business. Reviews stay up because they help other parents, but they are unlinked from your account and your name is removed, so they show as A PlayPivot parent. Business owner accounts carry listings, so email help@playpivot.org and we will close those by hand.
Remove your children's details but keep the account
In the Parent Portal, choose "Withdraw consent and remove children's data". Ages and interests are cleared and match alerts stop.
No account?
Email help@playpivot.org and tell us what you sent us (an inquiry, a review, a newsletter signup) and the email you used. We will tell you what we hold and delete it if you ask.
Emails
Every issue of The Weekly has a one-click unsubscribe link, and signed-in parents can turn it off in the Parent Portal. We send at most one email a week. After you send an inquiry, we may ask how it went: inside The Weekly if you get it, otherwise in one email a couple of weeks later. That email is sent once per inquiry and has a link to stop all emails from us. Businesses can stop lead emails with the unsubscribe link in each one.
Ads and analytics
Turn off personalized ads at Google Ads Settings or with the YourAdChoices opt-out tool (aboutads.info), install the Google Analytics opt-out add-on, turn on Global Privacy Control in your browser, or block third-party cookies in your browser. Read How Google uses data when you use our partners' sites or apps for how Google uses this data.
Location
Say no to the browser's location prompt and type a city instead. You can change the permission in your browser settings at any time.
Do not sell or share
See We do not sell your information for Nevada and California requests.
For anything else, like correcting your information, email help@playpivot.org. We confirm requests by replying to the email address we have for you, and we answer within 30 days.
8. How long we keep things
- Account data stays while your account is open and goes when you delete it.
- Inquiries stay so the business can see them. When you delete your account, your name, email and phone come off our copy and the messages you wrote are deleted; your first question, your child's age and the business's replies stay. Emails already delivered to a business or our inbox cannot be pulled back.
- Photos you upload stay up until you delete your account. Then the files and our records of them are deleted.
- Reviews stay published until you or the business asks us to look at them.
- Consent records are deleted with your account. One row with no name records that a deletion happened.
- Newsletter and email opt-outs stay on file with the date, so we do not email you again by mistake.
- The link or website that brought you here is kept with your newsletter signup, claim or inquiry for as long as that record exists. The cookie that carries it lasts 30 days.
- Listing activity, searches that found nothing, and Match My Child sentences are kept. Most carry no account id.
- Verification documents are kept while a claim is open. Once it is decided, email help@playpivot.org and we will delete them.
- Request logs, analytics and error reports are kept by Vercel, Google and Sentry under their own retention settings.
- Stripe records are kept as long as tax and accounting rules require.
9. Security
All traffic to the site uses HTTPS. Passwords are handled by Supabase and stored hashed. Our database host encrypts data at rest. Parent profiles are protected so only your own signed-in session can read them. Verification documents sit in a private bucket that only staff can open, through links that expire. Staff pages need a separate admin sign-in. Unsubscribe and rating links in our emails are signed, so they only work for the person we sent them to.
No site can promise perfect security. If you find a problem, email help@playpivot.org and we will look at it right away.
10. Changes to this policy
When we add a feature that collects something new or sends data somewhere new, we update this page, change the version number and update the effective date at the top.
Questions?
Email us about anything on this page, your data, or your children's data. A person reads every message.
help@playpivot.orgPlayPivot
209 S Stephanie St, Ste B, Henderson, NV 89012