Joey’s Toy Drive is a volunteer-run Bay Area toy drive. This policy explains what we collect from people who visit joeystoydrive.org, use our iPhone app, email or call us, donate toys, or host a workplace drive, and what we do with it.
What we collect
From this website: standard server logs (IP address, browser type, pages visited, referrer) that our hosting provider records automatically. They keep the site running and help us spot abuse. We run no third-party advertising trackers.
When you contact us: if you email info@joeystoydrive.org, call (408) 244-0400, or use the contact form, we keep what you tell us: your name, email, any phone number, and the contents of your message. We use it only to reply and coordinate the drive.
When you join the notify list: if you sign up to hear when the drive is underway, we store your email address and which page you signed up from. We use it to send drive-season notices and nothing else.
When you host a drive: we collect contact info for the people running the drive at your workplace, school, or community group, plus delivery logistics. We use it to send collection boxes, schedule pickups, and confirm distribution. Whether your location appears on the public donation-site map is your choice: sites that opt out are left off the map entirely, and past-season sites appear only as approximate dots with no name or address. Partner records stay with us from one season to the next. Email info@joeystoydrive.org and we’ll delete yours.
When you upload photos to the partner portal: photos and files a host uploads are stored privately. People signed in at that host organization and the Joey’s Toy Drive team can see them; nobody else can. You can delete anything you uploaded.
When you ship a toy via the Amazon wish list: Amazon sees your information, not us. We see only the toys that arrive at the warehouse. Amazon’s own privacy policy governs your shopping account.
The Joey’s Toy Drive iPhone app
The app uses the same account and the same database as the partner portal on this site, so everything above about accounts applies to it. A few things are specific to the app.
Your account: creating one stores your name, email address, phone number, and the role you choose (volunteer, drive host, or partner agency). Hosts and agencies also give an organization name. We use it to know who you are and how to reach you about a drive. You can change your name and phone number in the app at any time.
If you volunteer: signing up as a volunteer stores what the team needs to dispatch you safely: your date of birth, to confirm you are 18 or older, plus your address, an emergency contact, your availability, and a profile photo if you choose to add one. Photos live in private storage that only you and the team can open. When you sign the volunteer agreement, we keep the record of that signature: your typed legal name, the version you signed, when you signed it, and the signature you drew. Those records are permanent, because they are the legal record of what was agreed.
Deleting your account: you can delete it from inside the app, under Account. That permanently removes your profile, your role, and your sign-in. Your organization and its drive history stay with us, because one person closing their login is not the same thing as an organization withdrawing from the drive. If you want the organization removed too, email info@joeystoydrive.org.
Finding a donation site: when you search an address, or tap “Use my location,” the app sends that address or location to Apple’s mapping service to turn it into map coordinates, then compares it against our list of collection sites on your iPhone. We do not store it, and it never reaches Joey’s Toy Drive. Location access is asked for only at the moment you tap that button, and you can refuse and type an address instead.
Reminders: if you turn on drive reminders, your iPhone schedules them itself. There is no push service and no device token, so nothing about them leaves your device and we cannot send you anything else.
Tracking: the app contains no analytics, no advertising identifier, and no third-party tracking of any kind. It does not track you across other apps or websites.
Who we share it with
We share information only with the operational partners who need it to run the drive:
- Silicon Valley Moving & Storage handles collection-box delivery and pickup, so it receives the addresses and contact details that requires.
- Partner nonprofits, schools, and community organizations receive only the operational details needed for distribution scheduling.
- Our hosting provider (Vercel) and our authentication and database provider (Supabase) are the companies that host the site and store our data.
- Cloudflare runs the Turnstile security check that guards sign-in and account creation on the partner portal and in the iPhone app, so it sees those requests.
- Apple turns an address you search in the iPhone app into map coordinates. Apple sees that address; we do not receive it.
- Resend delivers our portal email, so it receives the address we send to and the contents of that message.
- Google Analytics measures traffic in aggregate. Google processes this usage data on our behalf, and we enable no advertising or ad-targeting features.
- Mailchimp receives your email address if you join the drive notify list, so we can send you that notice. Mailchimp also runs a site tracking script on every page to measure visits.
- Jotform delivers our contact and notify forms to the inbox we watch. From the contact form it receives your name, email, phone number, and your message; from the notify form, your email address.
We do not sell, rent, or trade your information to third parties for marketing.
Cookies & analytics
We use first-party cookies where the site needs them, for example remembering a session if you create an account. For traffic and performance we use Vercel’s cookieless Web Analytics and Speed Insights, Google Analytics 4, and Mailchimp’s site tracking script. Google Analytics sets its own cookies and is configured for aggregate reporting only, with no advertising or ad-targeting features. Mailchimp’s script is not aggregate: it sets its own cookies and can tie a visit to an individual subscriber. You can opt out of Google Analytics on every site with Google’s browser add-on.
Children’s privacy
Neither this website nor the iPhone app is directed to children under 13, and we do not knowingly collect information from them. Accounts are for adults running or helping with a drive.
Your rights
Under California law (CCPA and successors), California residents may ask us to access, correct, or delete the personal information we hold about them. Email info@joeystoydrive.org with the subject “Privacy request.” We answer every request.
Changes to this policy
We update this page when something material changes: a new provider, a new collection practice, or new applicable law. The “Last updated” date at the top marks the most recent revision.
Questions
Email info@joeystoydrive.org or write to Joey's Toy Drive, 186 Barnard Ave, San Jose, CA 95125.