ToyTrove (“we”, “us”) helps families track toy collections and share wishlists. This policy explains what we collect, why, and the choices you have. It applies to toytrove.app and any ToyTrove apps that link to it.
Information we collect
Information you give us
- Account details: email address, password (stored hashed by our authentication provider), and display name. If you sign in with Google we receive your name, email and profile picture from Google.
- Collection and wishlist data: the toys, books and items you add, their status, condition, quantity, notes, priorities and target prices.
- Family data: the family group you create or join, member roles, and invitations you send (including the invitee’s email address).
- Gift reservations: when someone reserves an item on a shared wishlist we store the name they enter and, if they choose to give it, their email address. We use that email only to identify the reservation; we never send marketing to it.
- Public profile: a username and the parts of your collection you choose to make public.
- Support messages you send us.
Information collected automatically
- Usage and device data: pages viewed, approximate location derived from IP address, browser and device type, and performance metrics. We use privacy-focused analytics from our hosting provider that do not use cross-site tracking cookies.
- Cookies: strictly necessary cookies that keep you signed in. We do not use advertising cookies.
Payment information
Paid subscriptions are processed by Stripe. Card numbers go directly to Stripe and never touch our servers. We store your Stripe customer id, subscription status and renewal date.
How we use information
- To provide the service: storing your collection, sharing wishlists, coordinating family approvals and gift reservations.
- To send transactional email such as sign-up confirmations, password resets, family invitations and approval notices. We do not send marketing email without your consent.
- To keep the service secure, prevent abuse and debug problems.
- To understand aggregate usage so we can improve ToyTrove.
- To comply with legal obligations.
Children’s privacy
ToyTrove is designed for families, and we take the Children’s Online Privacy Protection Act (COPPA) seriously.
- You must be at least 13 years old to create a ToyTrove account. We ask every new account holder to confirm this.
- Children under 13 do not create accounts. Parents keep wishlists for younger children from the parent’s own account.
- Family members with the “child” role (teens 13 and older) cannot make their profile or wishlists public. Only a parent in the family can share a child’s wishlist, and they can turn sharing off at any time.
- Items a child adds are held for parent approval before they appear on a shared list.
- If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it. Parents can contact us at hello@toytrove.app to review or delete information about their child.
Sharing and disclosure
We do not sell personal information. We share it only with:
- Service providers that run ToyTrove on our behalf: Supabase (database and authentication), Vercel (hosting and analytics), Stripe (payments) and Resend (transactional email). Each is bound by contract to use data only to provide their service.
- People you choose: family members you invite, and anyone you send a public profile or wishlist link to. Shared wishlists show the toy, your display name and the first name of anyone who reserved an item. They never show the list owner who reserved what.
- Retailers when you click an outbound link. Some links are affiliate links; the retailer may know you came from ToyTrove, and we may earn a commission. We do not share your identity with retailers.
- Authorities when required by law or to protect the rights and safety of users.
Data retention
We keep your data while your account is active. When you delete your account from Settings, your profile, collection, wishlists, reservations and family memberships are removed from live systems immediately. Residual copies in encrypted backups expire within 30 days. Stripe keeps billing records as required by tax and accounting law. Server logs that may contain IP addresses are kept for up to 30 days.
Your choices and rights
- Access and correction: edit your profile and data at any time in the app.
- Deletion: delete your account from Settings, or email us.
- Export: email us and we will send you a copy of your data in a machine-readable format.
- Sharing: make any profile or wishlist private again at any time; previously shared links stop working immediately.
- Residents of California, the EU, UK and other regions may have additional rights, including the right to object to processing and to lodge a complaint with a supervisory authority. We honor these requests regardless of where you live.
- We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of under the California Consumer Privacy Act. We do not discriminate against anyone for exercising a privacy right.
Security
Data is encrypted in transit and at rest. Access to production systems is limited to the people who operate ToyTrove. No system is perfectly secure; if we discover a breach affecting your data we will notify you as required by law.
International transfers
ToyTrove is operated from the United States and our providers store data in the United States.
Changes
We will post any changes here and update the date above. For material changes we will notify you by email or in the app before they take effect.
Contact
Questions or requests: hello@toytrove.app. See also our Terms of Service.