Joey’s Toy Drive is a volunteer-run Bay Area toy drive. This policy explains what we collect from people who visit joeystoydrive.org, use our iPhone app, email or call us, donate toys, or host a workplace drive, and what we do with it.
What We Collect
From this website: standard server logs (IP address, browser type, pages visited, referrer) that our hosting provider records automatically. They keep the site running and help us spot abuse. We run no third-party advertising trackers.
When you contact us: if you email info@joeystoydrive.org, call (408) 244-0400, or use the contact form, we keep what you tell us: your name, email, any phone number, and the contents of your message. We use it to reply, to coordinate the drive, and to send our newsletter.
Our newsletter: we send it through Mailchimp. When you sign up in the footer, we store your email address and the page you signed up from. We also add the email address you give us when you contact us, request a pickup or toys, host a drive, or apply to volunteer. Every newsletter has an unsubscribe link, and once you unsubscribe we do not add you back.
When you host a drive: we collect contact info for the people running the drive at your workplace, school, or community group, plus delivery logistics. We use it to send collection boxes, schedule pickups, and confirm distribution. Whether your location appears on the public donation-site map is your choice: sites that opt out are left off the map entirely, and past-season sites appear only as approximate dots with no name or address. Partner records stay with us from one season to the next. Email info@joeystoydrive.org and we’ll delete yours.
When you apply to volunteer: the volunteer application and the documents you sign at onboarding collect your name, contact details, date of birth (to apply the right age rules), the roles you want, availability, an emergency contact, and any medical information you choose to give us so we can respond in an emergency. Volunteers must be 18 or older. Signed documents are kept as the legal record of what was agreed, for at least four years after your last shift. Emergency and medical details are visible only to our team, and we use them only to respond in an emergency.
When you request a pickup or a toy allocation: donors requesting a pickup and partner agencies requesting toys give us contact details, an address, and the logistics of the request. We use them only to schedule and complete the pickup or delivery. An agency that requests toys also signs our distribution agreement, and we keep the record of that signature: the printed name, the signature drawn on the form, and when it was signed.
When you upload photos to the partner portal: photos and files a host uploads are stored privately. People signed in at that host organization and the Joey’s Toy Drive team can see them; nobody else can. You can delete anything you uploaded.
When you ship a toy via the Amazon wish list: Amazon sees your information, not us. We see only the toys that arrive. Amazon’s own privacy policy governs your shopping account.
The Joey’s Toy Drive iPhone App
The app uses the same account and the same database as the partner portal on this site, so everything above about accounts applies to it. A few things are specific to the app.
Your account: creating one stores your name, email address, phone number, and the role you choose (volunteer, drive host, or partner agency). Hosts and agencies also give an organization name. We use it to know who you are and how to reach you about a drive. You can change your name and phone number in the app at any time.
If you volunteer: signing up as a volunteer stores what the team needs to dispatch you safely: your date of birth, to confirm you are 18 or older, plus your address, an emergency contact, your availability, and a profile photo if you choose to add one. Profile photos live in private storage that only you and the team can open. When you sign the volunteer agreement, we keep the record of that signature: your typed legal name, the version you signed, when you signed it, the date of birth you gave, and the signature you drew. We keep those records after you delete your account, because they are the legal record of what was agreed.
If you apply to drive: drivers must be 21 or older, hold a valid driver’s license and current insurance, and be approved by our Executive Director. The driver application in the app asks for your legal name, address, driver’s license number, date of birth, phone number, email address, your vehicle’s year, make, model, and license plate, and photos of the front and back of your license and of your insurance card. The Executive Director uses them to decide whether to approve you to drive, and is the only person who can see the application and the photos. The rest of the team sees the application’s status: under review, approved, or not approved.
Deleting your account: you can delete it from inside the app, under Account. That permanently removes your profile, your role, and your sign-in. If you volunteer, it also removes the name, phone number, email address, home address, and date of birth on your volunteer profile, your availability, your emergency contacts, your profile photo, and any upcoming shifts. We keep the records of your volunteering after you delete your account: signed volunteer agreements and their signatures, driver applications and their license and insurance photos, and past shifts and routes, including the locations, photos, and signatures recorded on them. When we keep any of those, we also keep our team’s notes on your volunteer record. Your organization and its drive history stay with us, because one person closing their login is not the same thing as an organization withdrawing from the drive. If you want the organization removed too, email info@joeystoydrive.org.
Finding a donation site: when you search an address, or tap “Use my location,” the app sends that address or location to Apple’s mapping service to turn it into map coordinates, then compares it against our list of collection sites on your iPhone. We do not store it, and it never reaches Joey’s Toy Drive. Location access is asked for only at the moment you tap that button, and you can refuse and type an address instead.
Notifications: if you volunteer, the app asks permission to notify you when a route is assigned or a shift changes. Saying yes stores a device token with Joey’s Toy Drive; it is how a push reaches your iPhone, and we delete it when you sign out. Saying no means you check the app yourself, and you can change your answer any time in your iPhone’s Settings.
Driving a route: volunteer drivers run their routes in the app. From Start Run to End Run, the app sends your position to Joey’s Toy Drive so the team can follow the route, and each arrival and scan is stamped with where it happened. Tracking runs only between those two taps and stops the moment the run ends. Proof photos you take and the signatures collected at a stop are stored with the delivery record.
Tracking: the app contains no analytics, no advertising identifier, and no third-party tracking of any kind. It does not track you across other apps or websites.
Who We Share It With
We share information only with the operational partners who need it to run the drive:
- Silicon Valley Moving & Storage handles collection-box delivery and pickup, so it receives the addresses and contact details that requires.
- Partner nonprofits, schools, and community organizations receive only the operational details needed for distribution scheduling.
- Our hosting provider (Vercel) and our authentication and database provider (Supabase) are the companies that host the site and store our data.
- Cloudflare runs the Turnstile security check that guards sign-in and account creation on the partner portal and in the iPhone app, so it sees those requests.
- Apple turns an address you search in the iPhone app into map coordinates. Apple sees that address; we do not receive it. Apple’s notification service also carries the app’s push notifications to your iPhone.
- Resend delivers our portal email, so it receives the address we send to and the contents of that message.
- Twilio delivers our text messages, so it receives the mobile numbers of people who opted in and the messages we send them.
- Google hosts our email, so it receives the messages you send us and the replies we send.
- Anthropic provides the AI service that helps our team draft replies to email and answers our phone line when our team cannot. It receives the message or the call it is helping with. A person on our team reads and sends every email reply.
- Google Analytics measures traffic in aggregate. Google processes this usage data on our behalf, and we enable no advertising or ad-targeting features.
- Microsoft Clarity records how visitors use the site (clicks, scrolls, and session replays) so we can spot where the design breaks down. Microsoft processes this usage data on our behalf.
- Mailchimp sends our newsletter and holds the email addresses on that list.
- Jotform hosts our contact, volunteer application, pickup request, and host-a-drive forms, and the volunteer documents signed electronically. It stores what you enter on those forms and delivers it to the inbox we watch.
We do not sell, rent, or trade your information to third parties for marketing.
Text Messages (SMS)
If you opt in to text messages from Joey’s Toy Drive, we use your mobile number only to send volunteer shift confirmations and reminders, toy pickup and delivery notifications, and event updates. Message frequency varies, up to 8 messages per month. Message and data rates may apply. Mobile phone numbers and SMS opt-in consent are not shared with or sold to any third party or affiliate for marketing or promotional purposes. Opting in is never a condition of volunteering, donating, or hosting a drive. We keep a record of your opt-in (the wording you agreed to, the date and time, and the number you gave us) for at least four years, and we honor STOP requests permanently. Reply STOP to any message to opt out, or HELP for help. Text messages are delivered through Twilio, our messaging provider, which processes phone numbers solely to deliver messages on our behalf. Full terms are at joeystoydrive.org/terms.
Cookies & Analytics
We use first-party cookies where the site needs them, for example remembering a session if you create an account. The Host a Toy Drive signup form keeps what you type in your browser until you submit, so you can leave and come back to it. That copy stays on your device. For traffic and performance we use Vercel’s cookieless Web Analytics and Speed Insights, Google Analytics 4, and Microsoft Clarity. Google Analytics sets its own cookies and is configured for aggregate reporting only, with no advertising or ad-targeting features. Microsoft Clarity also sets its own cookies to record individual sessions, including mouse movement, clicks, and scrolling, so it can be tied to a single visit. You can opt out of Google Analytics on every site with Google’s browser add-on.
Children’s Privacy
Neither this website nor the iPhone app is directed to children under 13, and we do not knowingly collect information from them. Accounts are for adults running or helping with a drive. Volunteers must be 18 or older.
Your Rights
Under California law (CCPA and successors), California residents may ask us to access, correct, or delete the personal information we hold about them. Email info@joeystoydrive.org with the subject “Privacy request.” We answer every request.
Changes to This Policy
We update this page when something material changes: a new provider, a new collection practice, or new applicable law. The “Last updated” date at the top marks the most recent revision.
Questions
Email info@joeystoydrive.org or write to Joey's Toy Drive, 186 Barnard Ave, San Jose, CA 95125.