Privacy

Children under 13

Parts of this site are written for children. We do not ask children to provide names, email addresses, photos, or other personal details.

On every page under /kids:

• There are no forms, no sign-ups, and no accounts
• There are no advertising tags, social plugins, or webchat
• Cloudflare measures aggregate page traffic without analytics cookies. Google Analytics follows the regional settings and cookie choice described below, including in this section
• We do not ask for biometric identifiers, audio, video, or precise location. Analytics may estimate a general location, as described below

If you believe we have received personal information from your child, email [email protected] and we will delete it and confirm that we did.

Tools and saved preferences

Site searches run in your browser; we do not save the search terms. The family checkup asks for an age group and topic, not names or account details. If you choose to save your plan, remember a state, or mark a lesson complete, those preferences are stored in this browser and are not sent to our servers or linked to contribution records. Use “Clear my plan,” “Forget saved state,” or “Clear saved progress” in the relevant tool to remove them. They remain until you clear them or clear your browser's site data. Shared-device users should keep this in mind before saving.

Adults who contact us

If you email us about a workshop, we receive your email address and the information you include. We use it to answer you and to schedule sessions. We keep it for as long as we have an active relationship with your organization, and no longer than three years after our last contact.

Your saved family toolkit

The family toolkit can remember a selected state, age groups, apps or devices, and saved guide links in this browser’s local storage. We save choices only when you select “Remember these choices on this device” and submit them, or explicitly save a guide. Previewing choices does not save them. The toolkit does not ask for names, birth dates, or incident details.

These choices are not sent to our server or included in analytics events. They stay until you clear the saved toolkit or your browser removes site data. Someone using the same browser can see them. “Clear saved toolkit” removes this site’s saved toolkit choices; it does not clear browsing history or analytics preferences. Guide searches happen in your browser and are not sent to us.

Server logs

Our hosting provider records standard technical information about requests, including IP addresses, for security and abuse prevention. We do not use these logs to build profiles and we do not connect them to any person.

The Roblox account check

/tools/lookup is one place on this site where something you type is sent to our server rather than straight to somebody else's. It has to be: Roblox's public API refuses to answer a web browser directly, so we ask it on your behalf.

What happens to the username you type: we send it to Roblox, render the answer, and hold that rendered answer in a cache for ten minutes so that repeated checks of the same name do not hammer Roblox. We do not write it to a database, we do not attach it to you, and nothing about the search reaches any third party except Roblox itself. The cache is keyed on the username alone — it holds no record of who asked. After ten minutes it is gone.

Roblox will see that a request came from our server. They will not see your IP address, your browser, or anything else about you.

Analytics

We use Cloudflare Web Analytics across all website pages to understand page views, visits, popular pages, referral sources, device categories, and page performance. It does not use analytics cookies, local storage, or visitor fingerprinting. We do not use session recordings.

We also use Google Analytics to understand page views, visits, returning browsers, referral sources, device types, and approximate geographic areas. Google processes technical information such as IP addresses and browser details. Its analytics cookies use a browser identifier; we do not attach your name or contribution records to that identifier. Advertising personalization and Google signals are disabled.

For visitors Cloudflare identifies as being in the United States, Google Analytics loads automatically unless they previously chose “No thanks” or their browser sends a Global Privacy Control signal that prevents automatic activation. For visitors outside the United States, or when location cannot be determined, it stays off until they select “Allow analytics.” Cloudflare supplies a country-level decision; this check does not store or send your precise location to our analytics code. We do not show an automatic cookie popup. Open the analytics cookie settings in any page footer to opt out or change a previous choice. Leaving it off does not affect access to the website. Automatic activation is not saved as an explicit consent choice. We remember an explicit choice in your browser for up to 180 days. Withdrawing permission stops further Google Analytics collection and removes this site's Google Analytics cookies from that browser; it does not erase data already received by Google.

Analytics is separate from contribution records and newsletter preferences. We do not send checkout email addresses, selected newsletter states, payment information, or the usernames entered in the account-check tool to analytics. We remove query strings and fragments from the page addresses we send to Google. Google Analytics stays off on populated account and game lookup results. Hosting security logs are separate, as described above.

Adult contributions and billing

When you choose to contribute, you leave this website for Stripe’s hosted checkout. Stripe collects the contact and payment details needed to process your payment. We can view payment records and contact information in our Stripe account. We do not receive or store your full card number.

We use these records to administer contributions, answer billing questions, handle refunds, and meet accounting obligations. Our payment-event records contain Stripe identifiers, amounts, currency, payment or subscription status, and timestamps. They are kept separately from visitor analytics; we do not link contributions to your browsing history.

Stripe’s customer portal uses your checkout email address to give you access to billing management. Read Stripe’s privacy policy for how Stripe handles information. For questions about records we hold, email [email protected].

Your state newsletter: newsletter only

No spam. We never sell your information. Your email and ZIP code are used only for this newsletter. This includes managing your subscription. The newsletter may contain brief invitations to support our work; we do not enroll you in separate fundraising, advertising, or partner email lists.

Signup is free and intended for adults age 18 or older. We record your email address, selected state, and optional five-digit ZIP code, your newsletter consent, the signup form location, and timestamps in our private Cloudflare database. ZIP codes help us choose local coverage; they are not precise location, proof of residence, or a reliable way to identify your congressional district. When a ZIP has no verified local match within the selected state, the edition uses broader coverage from that state. Existing subscribers without a ZIP keep their subscription. The newsletter is one national weekly edition; your selected state decides which state section and official state links you receive. We do not ask for a child’s details, a street address, or a phone number. If you independently choose to contribute, Stripe handles billing and receipts separately.

Email delivery is being prepared. Submitting the signup form adds you to the newsletter list for your selected state right away; we do not send a confirmation email. Weekly newsletters begin when your state’s edition launches. Existing explicit checkout newsletter preferences are retained; a new payment is never required for the free summary. The detailed edition is intended for active monthly members who have opted in. One-time contributions do not grant recurring paid access.

Cloudflare hosts the signup records. Resend is the selected email-delivery provider; when delivery is activated, it will process subscriber addresses to deliver only these emails. We keep raw ZIP codes in our private database; the provider receives the selected edition audience, not your raw ZIP code. Service providers process information to operate the newsletter, not as a sale of your list. We do not use newsletter open pixels, individual click tracking, or subscriber advertising audiences.

We use a short-lived, rotating hash of the network address to limit automated signup attempts; the raw address is not stored in newsletter records, and the hash is not attached to your subscriber record. Standard hosting security logs are separate.

Every newsletter includes an unsubscribe link. Unsubscribing stops newsletter emails, not monthly payments; use Stripe’s membership portal to manage payments. We retain subscription preferences and consent records to honor opt-outs. You can ask us to remove your stored ZIP code or request deletion. Submitting the signup form again with the same email updates your state and ZIP. The signup form never reverses an unsubscribe; to rejoin after unsubscribing, email us. We match the newsletter email to verified monthly payment records to select the free or detailed edition; this does not grant email consent or undo an unsubscribe. Payment records include the subscription identifier, paid period, and status. Canceling paid access returns an opted-in reader to the free summary. To change your email preference, rejoin, or request deletion, email [email protected].

When Google Analytics is enabled under the settings above, we count signup requests and support-link clicks using fixed form-location labels. Email addresses, ZIP codes, payment details, and form contents are never included in those analytics events. Subscriptions and successful payments are counted separately in private aggregate reports.

Security

For questions about information security, contact [email protected].

Changes

If we change this policy we will update the date at the top and describe what changed. We will not retroactively apply a weaker policy to information we already hold.

Contact

[email protected]