EN|ES

Privacy at Parent Post

A Wisconsin nonprofit. No ads. Your data stays yours.

Last updated: 2026-10-03

1. Default: everything stays on your device

Using Parent Post without an account needs nothing from you. Your children's nicknames, ages, birth months, interests, home location, saved events, and language choice are stored only in your browser's local storage. All matching and recommendations are computed on your device. Clearing your browser's site data erases them completely.

We set no cookies. We run no advertising trackers. Our public impact numbers are anonymous, site-wide aggregates — we never track individuals.

The optional voice button ("Describe your family") only records after you tap "Start talking" — that tap is your consent for that one recording. On most desktop browsers your browser transcribes the audio itself and nothing reaches our servers. On phones (such as iPhones), the recording is sent once to our server purely to be transcribed, then immediately discarded — we never keep the audio or the transcript. What you said is converted into search filters on your device, and nothing is applied until you confirm "Does this look right?"

2. Synced accounts (opt-in): what we store

If you create an account and enable cross-device sync, we store only what sync needs: your children's nicknames, ages (or birth month and year), interests, your home location, and your family preferences. We store email addresses only as salted, one-way hashes — the raw address never touches our servers.

Children's details are stored only after verifiable parental consent (see below). No feature requires a synced account — sync is pure convenience.

3. How parents consent

Before the first sync, we show you exactly what will be stored and ask you to confirm that you are 18 or older and the parent or legal guardian of the children in the profile. We then email your verified address describing the consent, and you confirm a second time — no earlier than 24 hours after that email. Only then does syncing begin.

4. How we use it — and what we never do

Synced data is used for one purpose: syncing your family profile across your own devices. We never sell data. We never share or disclose children's details to third parties — no advertisers, no data vendors, no analytics companies. Email delivery (login codes, consent notices) sees only your email address, never your children's details.

5. Your rights as a parent

At any time, while signed in, you can:

• Review everything we hold about your family.
• Delete your account and all synced data — including your consent record. Deletion is confirmed to you.
• Revoke consent — collection stops immediately, and your stored data is deleted on request.

6. How long we keep it

We keep synced data until you delete it. If an account goes 24 months without a sign-in, we notify you and then purge the stored profile and consent record.

7. Security

Emails are stored only as salted hashes. Login codes and session tokens are random, hashed, and short-lived; sessions use httpOnly, Secure cookies. Consent records are tamper-evident (cryptographically signed). Form endpoints are honeypot-protected and rate-limited per IP.

8. Questions

Contact us about privacy at [email protected].

9. Prep emails — 24 hours before (opt-in)

If you ask for a prep guide for an event, we store your email address (as a salted, one-way hash — the raw address never touches our servers in the key), the event's ID, your language choice, and a random unsubscribe token. We use this for exactly one purpose: sending you a single prep email about 24 hours before that event, with transit, weather, and what-to-bring details drawn from the public event listing. Your family profile — kids' names, ages, rhythms, location — is never sent to us and never used in the email.

The subscription deletes itself automatically a few days after the event. Every prep email explains why you received it and carries a one-click unsubscribe link. We never sell or share your email address.