Privacy

Usage analytics. We use PostHog to understand how the site is used: page views, clicks, and whether forms are submitted. We do not record your screen or capture what you type into forms. When you volunteer or propose an agenda item, the analytics event is tagged with a one-way code derived from your email address so we can count unique volunteers; the address itself is not sent to PostHog. Analytics traffic goes through this site's own domain to PostHog's US cloud.

Information you submit on a form. When you sign up to volunteer, propose an agenda item, or ask to be recognised on a new device, the details you type — name, email, phone, topic — are saved to our records and, where relevant, emailed to the board through Resend. Our forms include a Cloudflare Turnstile check that tells human visitors from automated ones; it runs in the background and rarely asks you to do anything.

Address lookups on Take Action. If you type your address to find your elected officials, it is sent to NYC Planning Labs GeoSearch and the US Census Bureau geocoder to work out your districts, and then discarded. We do not store addresses.

Activity log. For accountability, the site keeps a log of changes made by board members and of public actions such as signing up for or cancelling a shift. Public entries include the IP address the action came from for 30 days, after which it is removed.

Server logs. Our host, Vercel, keeps short-lived request logs (IP address, browser type) for security and reliability. They are purged automatically.

The read-a-thon is the one part of this site that holds information about children, so here is all of it in one place.

Who signs a child up. Only a parent or guardian, on the sign-up page. The PA doesn't get class lists or anything else from the school's records.

What we keep. For each child: their first name, the first letter of their last name, and their class. For the family: the email address of each parent or guardian on it (yours, and any you invite), and when you agreed to these terms. Then the minutes you log each day, and which of you logged them and when (shown only on your family's page), the goal you set, and your two privacy choices: whether family and friends can find your child by name, and whether your child shows on the top-readers list. A photo on your child's page only if you add one (below). We never collect a surname, a birthday or a student ID.

Why. To give your child a page you can share with family and friends, to add up minutes and gifts for your child, their class and the school, and to email you the link to your family's page.

Who sees what.

• Anyone you share your child's page with sees their first name and last initial, their class, their minutes, their goal, the amount raised, and the names of supporters who chose to show one. The page's address uses a random code, never the name, and search engines are asked not to list it.
• The read-a-thon page ranks classes and grades by minutes. It names your child in two places only, and only if you turn each one on; both start off. “Find a reader” lets anyone who types your child's first name find their page. The top-readers list shows the top readers in each grade by first name, last initial, class and minutes, never the amount raised, and links to their page, so a child on the list can be found by name too.
• A photo you add to your child's page shows on that page and on your family's sponsor page, to anyone with the link. It shows in the preview a link makes when it's shared (in texts, WhatsApp and social media) only if you tick that box too. It never shows on the read-a-thon page, the top-readers list or your child's class page.
• Your child's teacher sees that your child is signed up and their minutes, and can add reading done in class. They don't see your email or any gifts.
• The PA board and treasurer can see these records to run the fundraiser and keep its accounts.

Gifts. Gifts are made through Zeffy, which takes the payment; we never see card details. Zeffy tells us the amount, the donor's name and email, and the name they chose to show, if any. Donors' details are seen by the board and treasurer only.

Reading photos. Your family's page can put a read-a-thon frame around a photo for you to share. The framing happens on your own phone or computer, and the photo stays there unless you choose to put it on your child's page. A child's page has no photo unless a parent or guardian adds one and agrees to the terms on the form. Before it's uploaded, it's made smaller on your device, and its hidden details, like where it was taken, are left out. We keep the photo, when you agreed, and whether it may show in link previews. It's stored with this site's other images, on Vercel, at an address that can't be guessed. You can change or remove it at any time on your family's page, and removing it deletes it. The PA board can remove any photo too.

Email and cookies. When you sign up we email you a link: tapping its button confirms your email and opens your family's page, and until then your child isn't shown anywhere else on the site. We email it again whenever you ask. If you invite another parent or guardian, we email them once, with their own link and a way to take their address off; once they tap it, they get the same emails you do. Each of you gets your own copy, so nobody sees another's address. We keep a record that the email was sent, but not the link or your children's names. Two cookies, ps889_readathon_family_pages and ps889_readathon_family_api, keep your device signed in to your family's page for 90 days. They're sent only to the read-a-thon's own pages, not to the rest of the site.

Removing your child. “Remove” on your family's page deletes that child's name, class, minutes, goal and page photo straight away. Removing your last child deletes every email on your family's page too, signs your device out, and removes those addresses from our records of the emails we sent. Taking a grown-up's email off, on your page or with the link in their emails, removes it the same way; if theirs was the only one, the sign-up and its children go with it. Gifts already given stay in the PA's accounts, but no longer point to your child.

How long we keep it. Children's names, classes, minutes and page photos, and families' email addresses, are deleted 60 days after the read-a-thon's last reading day, once the board has closed it, and in any case within six months. That leaves time to award prizes and settle late gifts. Gift records are kept as the PA's financial record-keeping requires, without the link to any child. At the same time, each donor's name and email are removed from this site; Zeffy keeps them for tax receipts. We keep each year's totals, such as money raised and minutes read for the school and for each class, with no names, so the PA can compare one year with the next.