Privacy Policy
This policy explains, in plain language, what information Summer '26 collects, why, and how we protect it. We built this app for a small group that includes children, so we treat their information with extra care and follow the spirit of the U.S. Children's Online Privacy Protection Act (COPPA).
Information we collect
- From the child: first name/nickname, email, date of birth, chosen emoji avatar and theme, and the bucket-list items, notes, and photos they add.
- From the parent/guardian: an email address, used to request and record consent and to let you manage or delete the account.
- Technical: we keep a basic record of consent events (date, time, and IP address of the approval) so we can prove consent was given, plus standard server logs. We do not use tracking cookies or third-party analytics.
Why we collect it
Only to run the app: to create and secure the account, to verify age and parental consent, to show the user their own list, and to let them share it with members they choose.
Parental consent
For any account belonging to a minor, we email the parent/guardian when the child registers. The account cannot be used until the parent approves it. We store which version of these terms was approved and when.
How information is shared
We do not sell, rent, trade, or disclose personal information to third parties for their own use — ever. A user's list is visible only to that user, to members they personally choose to share with, and to administrators for safety and support. We don't show advertising and we don't share data with advertisers.
We may disclose information only if strictly required by law, or to protect the safety of a child or another person.
How we protect it
- All traffic is encrypted over HTTPS.
- Sign-in uses one-time emailed codes or salted, hashed passwords — we never store passwords or codes in plain text.
- Database access uses prepared statements; every action is checked against the owner of the data.
- Uploaded photos are re-encoded, given random names, and stored where scripts can't run; they're never exposed through a public link.
Data retention & deletion
We keep information only while the account is in use. A parent/guardian (or the user) can request deletion at any time, and we'll remove the account and its content, including photos. We keep a minimal consent record as required to show consent history.
Your choices & rights
A parent/guardian may review the information we hold about their child, refuse to allow further collection, withdraw consent, and request deletion. Use the private link in the approval email, or email us (below). We don't condition a child's participation on collecting more information than is reasonably necessary.
Contact
For any privacy question or request: hi@seanblake.info.