Security & Safety

How we protect your information

Every family who signs up, shares a story, or supports this project is trusting us with real personal information. Here's plainly what we collect, why, and how we protect it — no jargon, nothing hidden.

01. What we collect

Sign-up form

Your name, email address, and role (parent, coach, league organizer, or supporter). That's it — we don't ask for anything we don't need.

Story submissions

Whatever you choose to share, however you choose to share it — a written story, a 1–10 rating of how cost affects your family, or a link to a video or voice message. A name is optional; you can submit as "Anonymous."

We don't track your location, use tracking cookies, or collect anything beyond what these two forms ask for.

02. How we protect it

Encryption

Your email and name are encrypted

Names and email addresses are never stored as plain, readable text. They're encrypted before they're saved, using industry-standard AES-256 encryption — the same class of protection used by banks and healthcare systems. The key that unlocks that data lives only on our server, never in the database itself.

Access control

Only authenticated staff can see raw signup data

The public website only ever shows aggregate numbers — like "1,204 families reached" — never a list of names or emails. Viewing the actual signup list requires a staff login, and every single access is logged: who looked, and when.

Infrastructure

The connection between you and us is encrypted

The site is served over HTTPS, meaning the information you submit is encrypted in transit, not just once it reaches our servers. Our systems are built with layered protections against automated attacks and abuse.

Minimal by design

We only keep what we need

We don't collect data "just in case." If you ask us to delete your information, we will — see below for how.

03. Your choices

04. An honest note on where we are

Security isn't a box we check once — it's something we keep working on as this project grows. We review our practices on an ongoing basis and are committed to independent, third-party review of our systems before we scale up how much data we collect.

What this page is not: a claim that no system can ever be broken into. No organization can honestly promise that. What we can promise is that we take real, verifiable steps to protect your information, we're transparent about what those steps are, and we'll tell you if something ever goes wrong.

Questions, concerns, or found something?

If you have a question about how your data is handled, want something deleted, or believe you've found a security issue with our site, we want to hear from it directly.

Contact us