Joey’s Toy Drive is a volunteer-run Bay Area toy drive. This policy covers what we collect when you visit joeystoydrive.org, use our iPhone app, contact us, donate, volunteer, request toys, or host a drive, and what we do with it.
What We Collect
From this website: our hosting provider automatically records standard server logs: IP address, browser type, pages visited, and referrer. The logs keep the site running and help us spot abuse. We run no third-party advertising trackers.
When you contact us: if you email info@joeystoydrive.org, call (408) 244-0400, or use the contact form, we keep what you tell us: your name, email, any phone number, and the contents of your message. We use it to reply, to coordinate the drive, and to send our newsletter. We record calls to and from our phone line, and a notice at the start of the call says so. We also keep voicemails, along with written transcripts of them and of calls our AI service answers.
Our newsletter: we send it through Mailchimp. When you sign up in the footer, we store your email address and the page you signed up from. We also add your email address to the list when you contact us, request a pickup or toys, host a drive, or apply to volunteer. Every newsletter has an unsubscribe link, and once you unsubscribe we do not add you back.
When you host a drive: we collect contact details for the people running the drive at your workplace, school, or community group, plus delivery logistics. We use them to send collection boxes, schedule pickups, and confirm distribution. You choose whether your location appears on the public donation-site map, and if you say no, it stays off the map entirely. The map shows only current sites, and we never publish a past-season site’s name or address. We keep partner records from one season to the next; email info@joeystoydrive.org and we’ll delete yours.
When you apply to volunteer: the volunteer application and the documents you sign at onboarding ask for your name, contact details, date of birth (so we can apply the right age rules), the roles you want, your availability, an emergency contact, and any medical information you choose to give us. Volunteers must be 18 or older. Only our team can see your emergency and medical details, and we use them only to respond in an emergency. We keep signed documents for at least four years after your last shift, as the legal record of what was agreed.
When you request a pickup or a toy allocation: donors who request a pickup and partner agencies that request toys give us contact details, an address, and the logistics of the request. We use them to schedule and complete the pickup. An agency that requests toys also signs our distribution agreement. We keep a record of that signature: the printed name, the signature drawn on the form, and when it was signed.
When you upload photos to the partner portal: we store the photos and files you upload privately. Only people signed in at your organization and the Joey’s Toy Drive team can see them, and you can delete anything you uploaded.
When you ship a toy via the Amazon wish list: Amazon sees your information; we see only the toys that arrive. Amazon’s own privacy policy governs your shopping account.
The Joey’s Toy Drive iPhone App
The app uses the same account and the same database as the partner portal on this site, so everything above about accounts applies to it too.
Your account: creating one stores your name, email address, phone number, and the role you choose (volunteer, drive host, or partner agency). Drive hosts and partner agencies also give an organization name. We use these details to know who you are and how to reach you about a drive. You can change your name and phone number in the app at any time.
If you volunteer: signing up as a volunteer stores what the team needs to dispatch you safely: your date of birth (to confirm you are 18 or older), your address, an emergency contact, your availability, and a profile photo if you choose to add one. Your profile photo is kept in private storage that only you and the team can open. When you sign the volunteer agreement, we keep a record of the signature: your typed legal name, the version you signed, when you signed it, the date of birth you gave, and the signature you drew. That record is the legal record of what was agreed, so we keep it after you delete your account.
If you apply to drive: drivers must be 21 or older, hold a valid driver’s license and current insurance, and be approved by our Executive Director. The driver application in the app asks for your legal name, address, date of birth, phone number, and email address; your driver’s license number, the state that issued it, and its expiration date; your vehicle’s year, make, model, and license plate; and photos of the front and back of your license and of your insurance card. We keep this information for our records and use your date of birth to confirm your age. We do not verify your license, insurance, or driving record, and we run no background check. The Executive Director is the only person who can see the application and the photos, and decides whether to approve you to drive. The rest of the team sees the application’s status: under review, approved, or not approved.
Signing documents: volunteers sign the volunteer agreement in the app. As evidence that the signature is yours, we record the email address on your account, your IP address, and the app and system details your device sends with the signature. From version 1.1 of the app, you first agree to our Consent to Electronic Records and Signatures, and drivers also sign the Volunteer Driver Agreement. The app reports its version and your device’s model, iOS version, and time zone, along with the times you opened the document, agreed to use electronic records, reached the end, signed, and tapped Finish. We store each signed document as a PDF and email you a copy from operations@joeystoydrive.org, and you can open it in the app under Account. We keep signed documents and these details after you delete your account.
Deleting your account: you can delete it from inside the app, under Account. That permanently removes your profile, your role, and your sign-in. If you volunteer, it also removes the name, phone number, email address, home address, and date of birth on your volunteer profile. It removes your availability, your emergency contacts, your profile photo, and any upcoming shifts as well. We keep the records of your volunteering after you delete your account: signed volunteer and driver agreements, their signatures, and the details recorded when you signed them; driver applications and their license and insurance photos; and past shifts and routes, including the locations, photos, and signatures recorded on them. When we keep any of those, we also keep our team’s notes on your volunteer record. Your organization and its drive history stay with us, because closing one person’s login does not withdraw the organization from the drive. To have the organization removed too, email info@joeystoydrive.org.
Addresses and maps: the app’s maps, address suggestions, and directions come from Mapbox, our mapping provider. When you type an address, Mapbox receives what you type and suggests matches. When you sign up to volunteer, we save the address you pick to your volunteer profile, as described above.
Notifications: if you volunteer, the app asks permission to notify you when a route is assigned or a shift changes. If you say yes, the app stores a device token with Joey’s Toy Drive so notifications can reach your iPhone, and we delete it when you sign out. If you say no, you check the app yourself. You can change your answer any time in your iPhone’s Settings.
Location: the app asks for location access once, right after you sign in. If you decline, you can still volunteer, check in and out, and scan box labels, but you cannot drive a route. Outside a route, the app records your location only when you scan a box label or tap Check-In or Check Out on the Volunteer tab. A check-in saves the time and where you were, so the team can see your volunteer hours. With location off, it saves the time alone. While the app is open, it checks on your iPhone whether you are at one of our sites and, if you are, offers to scan the box labels there.
Driving a route: volunteer drivers run their routes in the app. From Start Route to End Route, the app sends your position to Joey’s Toy Drive so the team can follow the route, and stamps each arrival and scan with where it happened. Route tracking runs only between those two taps and stops the moment the route ends. We store the proof photos you take and the signatures collected at a stop with that stop’s record.
Tracking: the app contains no analytics, no advertising identifier, and no third-party tracking of any kind. It does not track you across other apps or websites.
Who We Share It With
We share information only with the operational partners who need it to run the drive:
- Silicon Valley Moving & Storage handles collection-box delivery and pickup, so it receives the addresses and contact details that work needs.
- Partner nonprofits, schools, and community organizations receive only the operational details they need to schedule distribution.
- Our hosting provider (Vercel) and our authentication and database provider (Supabase) host the site and store our data.
- Cloudflare runs the Turnstile security check on our contact, Host a Toy Drive, agency toy request, newsletter, and portal Help forms, and whenever someone signs in or creates an account, on the web or in the iPhone app, so it sees those requests.
- Apple carries the app’s push notifications to your iPhone.
- Mapbox draws the maps on this site and in the iPhone app, suggests addresses as you type, gives directions in the app, and turns the partner addresses we store into map coordinates. It receives what you type into an address or map search. In the app, it also receives your position when it plans directions, ranks place search results near you, or names the street where you scanned a box. If you choose another maps app for directions, that app receives the destination.
- Resend sends our automated email, such as sign-in links, sign-up confirmations, copies of signed agreements, and updates on toy requests and pickups, so it receives the address we send to and the contents of each message.
- Twilio carries our phone line and our text messages. It handles calls to and from our number, including their recordings and voicemails, and it receives the phone numbers we exchange texts with and the messages themselves.
- Google hosts our email, so it receives the messages you send us and the replies we send.
- Anthropic provides the AI service that helps our team draft replies to email, can answer calls to our phone line, and answers our staff’s questions by text. It receives the message or the call it is helping with. A person on our team reads and sends every email reply.
- Google Analytics measures traffic in aggregate. Google processes this usage data on our behalf, and we enable no advertising or ad-targeting features.
- Microsoft Clarity records how visitors use the site (clicks, scrolls, and session replays) so we can spot where the design breaks down. Microsoft processes this usage data on our behalf.
- Sentry receives a report when a page or a form on the site fails. The report gives the page, the browser and device type, and the error, so we can fix it.
- Mailchimp sends our newsletter and holds the email addresses on that list.
- Jotform hosts our contact, pickup request, and host-a-drive forms. It stores what you enter on those forms and sends it to the inbox we watch. It also keeps the volunteer applications and signed agreements that people sent through our online volunteer form, which the app has replaced.
We do not sell, rent, or trade your information to third parties for marketing.
Text Messages (SMS)
If you opt in to text messages on one of our forms or in the app, we use your mobile number only to send volunteer shift confirmations and reminders, toy pickup and delivery notifications, and event updates. Message frequency varies, up to 8 messages per month. Message and data rates may apply. Mobile phone numbers and SMS opt-in consent are not shared with or sold to any third party or affiliate for marketing or promotional purposes. Opting in is never a condition of volunteering, donating, or hosting a drive. We keep a record of your opt-in (the wording you agreed to, the date and time, and the number you gave us) for at least four years, and we honor STOP requests permanently. Reply STOP to any message to opt out, or HELP for help. Text messages are delivered through Twilio, our messaging provider, which processes phone numbers solely to deliver messages on our behalf. Full terms are at joeystoydrive.org/terms.
Our staff can enroll in the Staff Assistant by texting JOIN to (669) 267-7778. For enrolled staff, we use the mobile number only to answer the questions they text and to send questions about delivery planning. It replies only to numbers our Executive Director has authorized. The same protections apply: the number and consent are never shared for marketing, we keep the opt-in record, and STOP ends the messages.
Cookies & Analytics
We use first-party cookies where the site needs them, for example to remember your session if you create an account. The Host a Toy Drive sign-up form saves what you type in your browser until you submit, so you can leave and come back to it. That copy stays on your device. For traffic and performance, we use Vercel’s cookieless Speed Insights, Google Analytics 4, and Microsoft Clarity. Google Analytics sets its own cookies, and we configure it for aggregate reporting only, with no advertising or ad-targeting features. Microsoft Clarity also sets its own cookies. It uses them to record individual sessions, including mouse movement, clicks, and scrolling, so a recording can be tied to a single visit. You can opt out of Google Analytics on every site with Google’s browser add-on.
Children’s Privacy
Neither this website nor the iPhone app is directed to children under 13, and we do not knowingly collect information from them. Accounts are for adults running or helping with a drive. Volunteers must be 18 or older.
Your Rights
If you are a California resident, California law (the CCPA and its successors) lets you ask us to access, correct, or delete the personal information we hold about you. Email info@joeystoydrive.org with the subject “Privacy request.” We answer every request.
Changes to This Policy
We update this page when something material changes: a new provider, a new collection practice, or new applicable law. The “Last updated” date at the top shows when we last revised it.
Questions
Email info@joeystoydrive.org or write to Joey's Toy Drive, 186 Barnard Ave, San Jose, CA 95125.