The short version
We collect the minimum needed to run a school fundraiser. We do not sell personal information, we do not run advertising, and we do not track you across other websites. The only thing we store about a child is a first name or nickname, entered by their parent or guardian, and it is never shown publicly.
Children’s information
This is the part that matters most, so it goes first rather than buried at the bottom.
- Children cannot create accounts.Only an adult can add a child, and the record is always attached to that adult’s account or to school staff.
- We store a first name or nickname and, optionally, a grade and class. There is no field anywhere in the product for a child’s last name, birthdate, photo, address, phone number, or email. This is a constraint in the database, not just the interface.
- Nothing about a child is public.A child’s name is visible only to their guardian and to staff at their own school. Public school pages show card counts and dollars and nothing else — not names, not the number of children taking part.
- The guardian is in control.You can view, change, or ask us to delete a child’s record at any time from your family page.
If you believe a child’s information has been entered by someone who is not their parent or guardian, tell us and we will remove it.
What we collect
- Account details. Email address, and a name if you give one. Passwords are handled by our authentication provider and we never see them.
- School details. School name, district, level, location, and the contact information of the person who signed the school up.
- Students. A first name or nickname, and optionally a grade and class. Added by a guardian or by school staff so card donations can be credited.
- Card drop-offs. How many cards came in, the date, optionally which student brought them, and a family name if one is given. Attribution is optional throughout.
- Shipments and payments. Tracking details for boxes sent to us, the counts we verify, and the payments we make to the school.
- Support messages. Whatever you send us through the contact form, plus the email address to reply to.
- Basic request logs. The page path, the HTTP method, the response status, how many milliseconds it took, and your account ID if you were signed in. This is how we spot the site being slow. We do not store IP addresses or build behavioural profiles from it.
Why we collect it
To run the card drive: to show a school’s page, let a school record what came in, track boxes to us, count them, and pay the school the right amount. To answer support requests. To keep the service working and reasonably fast. That is the whole list.
Who can see what
Access is enforced by the database itself, not only by the interface, so a bug in a page cannot expose the wrong rows.
- The public sees approved schools and their aggregate card counts and totals. Never an individual drop-off, never a student.
- School staffsee only their own school’s students, drop-offs, shipments and payments.
- Familiessee only their own children and those children’s card donations.
- Our staff can see school applications, incoming shipments, verified counts, payments and support tickets in order to run the platform and pay schools.
Who we share it with
We do not sell or rent personal information. We use a small number of service providers to operate the product:
- Supabase — database, authentication and hosting of your data.
- Vercel — application hosting and delivery.
We would also disclose information if the law required it, or to protect someone from harm. If that ever happens we will say so publicly unless we are legally barred from doing it.
Cookies
One kind: the cookie that keeps you signed in. There is no advertising, no analytics pixel, and no third-party tracker on this site. Sign out and the cookie goes.
Keeping it
Card and payment records are kept while a school is using the platform, and afterwards for as long as we need them for tax and accounting purposes — we are buying goods from a school, so those records are financial ones. You can ask for your account and everything attached to it to be deleted at any time, and we will do it. Support messages are kept for a reasonable period so we can follow up.
Your choices
Ask us and we will tell you what we hold about you, correct it, or delete it. Depending on where you live you may have additional rights — we intend to honour requests like these regardless of whether a specific law compels us to.
Changes
If this policy changes in a way that matters, we will say so on this page and update the date at the top rather than quietly editing it.
Contact
Questions, requests, or something that looks wrong: get in touch.
Pokémon-athon is not affiliated with, endorsed by, or sponsored by Nintendo, Creatures Inc., Game Freak, or The Pokémon Company.