Privacy Policy

1. What we collect

From families, when a parent or guardian registers:

• Parent or guardian name, phone, email, and home address.
• Your answer to the question about your family.
• Each child's first and last name, age, gender, clothing and shoe sizes, and interests.

From donors: your name and email when you claim a tag or donate, the tags you claim and their status, and the amount you donate. Card payments are handled by Stripe; we never see or store your full card number.

From admins: your email address and sign-in activity.

Automatically: basic technical information such as your IP address and browser, which our hosting and bot-check providers use to keep the site working and to stop abuse. We also use your IP address, without storing it, to limit repeated submissions.

2. What donors and the public can see

The public tag board shows each child under a code like “Family 12, Child B” with only their age, gender, clothing and shoe sizes, and interests. It never shows names, addresses, phone numbers, emails, or your family answer. This is enforced in our database, not just on the screen. The organizer's admins are asked to review interests before the board opens and remove anything that could identify a child, but please don't include names or other identifying details when you list interests.

3. How we use it

• To run the event: registering families, showing tags, recording claims and donations, and helping the organizer give out gifts.
• To send emails about the event, such as your registration confirmation, claim confirmations, your manage link, drop-off reminders, and donation receipts. We don't send marketing emails.
• To process payments and refunds, and keep accounting records.
• To keep TagTree secure and prevent abuse.

4. Who we share it with

• The organizer. The organizer's admins can see the registrations, claims, and donations for their own event, including family details and donor names and emails, so they can run the program. Admins only see their own organization's data.
• Rare Digital can access the data to run, support, and fix TagTree.
• Service providers that run parts of TagTree for us: Supabase (database and admin sign-in), Vercel (hosting), Resend (email), Stripe (payments), and Cloudflare Turnstile (bot checks, when turned on). They may only use the data to provide their service.
• Google Maps, only when an admin opens a family's address in maps to deliver gifts. The address is sent to Google to show directions.
• When the law requires it, or to protect someone's safety.

We don't sell or rent personal information, and we don't use advertising or analytics trackers.

5. Cookies

Families and donors don't need an account, and we don't set tracking cookies. Admins get a sign-in cookie that keeps them logged in. The bot check, when turned on, may use its own cookies or browser storage to tell people from bots.

6. How long we keep it

We delete personal details about one month after gifts are given out at the end of each event. That includes parent and guardian names and contact details, addresses, family answers, children's last names, and donor names and emails. We keep anonymous counts (like how many children were helped) and the donation amounts and payment records we need for accounting. Stripe keeps its own payment records, and Resend keeps its own email delivery logs, under their own policies. Admin accounts stay until the admin is removed.

7. Children

TagTree isn't meant for children to use on their own, and we don't knowingly collect information directly from children. Information about children is given to us by a parent or guardian so the organizer can provide gifts.

8. Security

We use encrypted connections, limit who can see family information, and enforce those limits in the database. No system is perfectly secure, so please keep your manage link and admin email account private.

9. Your choices

You can ask to see, correct, or delete your information at any time by emailing hello@getraredigital.com or contacting the organizer running your event. We may need to confirm who you are first, and we may keep payment records we're required to keep.

10. Changes

We may update this policy. When we do, we'll change the date at the top of this page.

11. Contact

Questions about this policy or your information: email Rare Digital at hello@getraredigital.com.