Private reasons.
Chosen invitations.

1. What we handle, and why

• Browser drafts. Your writing, questionnaire answers, and invitation edits use local browser storage so you can return to them. Drafting alone does not create a published page. Anyone with access to the same browser or device may be able to see that local information.
• AI previews. When you request an AI preview, your answers are transmitted to PlayDate's server. Freewrite goes to Anthropic for structured extraction and suggested wording; questionnaire choices are normalized directly without sending them to Anthropic. When updating an existing private profile, its current match preferences also go to Anthropic to preserve context. This can include sensitive details you entered. Writing an invitation by hand avoids this AI-preview step. The preview endpoint does not itself save a family record in our database; provider processing and operational logs are separate from that database record.
• Sign-in. Google and Supabase authenticate your account. We receive an account identifier, email address, and basic profile information Google provides, such as your name or profile image. We do not receive your Google password or request access to Gmail messages, contacts, or calendars for sign-in.
• Publishing. We store the invitation's name, member description, broad location, introduction, activities, boundaries, and any uploaded photos. We separately store normalized private match preferences, private notes, and your contact email to support matching and introductions. New profile publishing does not store the original freewrite. Legacy stories remain privately stored for compatibility; one pending quick update note may be retained until a subsequent successful update processes it. There is no automatic expiry for that pending note yet.
• Connections. We handle favorites, match-notice records, introductions, and messages you choose to send, so families can connect and repeated notices can be limited.
• Technical information. Hosting and other providers may process IP addresses, browser information, request times, and error or delivery logs to run, secure, and troubleshoot the service.

Please use broad locations and only the details needed for a useful invitation. Avoid exact addresses, children's full names, identification documents, medical records, and private information about people you are not authorized to represent.

2. An invitation is a sharing choice

Basic site traffic. On the homepage and published family pages, we count page views and short browser-tab sessions to understand whether visitors arrive from social posts, search engines, or other sources. We store broad source and device categories, page type, and campaign/postcard labels from tagged links. We do not put family content, draft answers, contact information, full URLs, URL fragments, search terms or IP addresses in this analytics store. It uses a random session identifier in session storage, starts a new session after 30 minutes between page loads, and does not use tracking cookies or fingerprinting. We skip collection when your browser signals Do Not Track or Global Privacy Control. The owner-only dashboard shows aggregate counts for up to 90 days; older event records are removed when new traffic is collected. Hosting providers may separately process request information for service operation and security.

A browser-only invitation link encodes the reviewed invitation in the URL fragment. It is not encrypted. Anyone who receives the link can read, copy, or forward it. If you enter a contact email in the invitation, that email is also included in the link. Leave that field blank if you do not want to share it this way.

A published family page and its photos are public. They can be accessed by people with the address and may be copied, indexed, or retrieved through the service's public data access. PlayDate does not present a searchable family directory, but that does not make published content confidential.

Private stories, private notes, and the separately stored contact email are not displayed as part of the public family page. Authorized service operations can access private records to maintain the service and deliver introductions. Matching evaluates structured private preferences on the server. Other families receive only reviewed public information and safe fit explanations, never the underlying private state. Browser invitation compatibility uses only invitation details.

Publishing can result in automatic service emails about new fits. Mutual favorites can trigger introduction notices. If you use “Say hi,” your message is delivered to the other family and your contact email can be included as the reply address. Their address is not shown to you by that action, but replying directly may reveal it. A favorite, match, or message never requires a reply or a meeting.

3. The providers that help us

We use Vercel for hosting and server requests, Supabase for authentication, database storage and uploaded photos, Google for sign-in, Anthropic for requested AI processing, and Resend for service emails when email delivery is enabled. The app also loads software from esm.sh. These providers receive the information needed for their role and may process it in countries outside yours, including the United States, under their applicable terms and privacy practices.

We do not sell personal information or share it for cross-context behavioral advertising. We use it to provide PlayDate, support users, protect the service, and comply with legal obligations. We may disclose information when legally required or reasonably necessary to address abuse, security incidents, or threats to people's safety. If the service changes ownership, we will provide notice of a transfer affecting personal information and any choices required by law.

4. Your choices, access, and deletion

You can draft without an account, write the invitation by hand, omit optional details, and choose whether to create a link or publish a page. Review all AI wording before sharing; automated filtering can miss a private detail.

Use “Clear draft” to clear the draft and questionnaire answers it covers. To remove all PlayDate information saved locally, including invitation and sign-in state, clear this site's browser storage. Clearing browser data or signing out does not delete a published page or server records.

To request a copy or correction of your server information, removal of a published page or photo, account deletion, or an end to match emails, email adam@adambyrne.com. We may verify account ownership before acting. Depending on your location, you may have additional rights to access, portability, restriction, objection, withdrawal of consent, or a complaint to a privacy regulator. We will handle applicable requests within the time required by law and will not penalize you for exercising those rights.

Local information remains until removed from the browser. Server records remain while needed to provide your account and the service, unless you request deletion. Some information may need to remain for legal obligations, security, dispute resolution, or backup recovery. We do not promise immediate removal from backups, email inboxes, forwarded links, or third-party copies; we will explain any applicable retention when handling your request.

5. Adults use PlayDate; children do not hold accounts

PlayDate is intended for parents and guardians aged 18 or older, not for children to use independently. Adults may provide limited family information about children they are authorized to represent. That information deserves care even when an adult supplies it. Do not ask a child to submit their own personal information or contact strangers through PlayDate. If you believe a child has provided information directly, contact us so we can investigate and remove it as appropriate.

6. Security, storage, and policy changes

We use access controls to separate private records from public invitations. No website, account, or device can guarantee perfect security. This site uses browser storage and authentication-related technologies for drafts and sign-in; blocking or clearing them may remove your draft or require you to sign in again.

We will update this page and its effective date when our practices change, and provide additional notice when a material change or applicable law requires it. A new policy does not silently turn an existing private draft into public content.