A short, honest promise about your family's data

Privacy Policy

Last updated: July 2026 · Applies to swaparound.unitedundergod.org

Sandlot is a place for parents to bring their kids to supervised, in-person toy-swap meetups. Because children are involved, we built it to collect as little information as possible — and this page explains exactly what that means, in plain language.

We will never sell your data. We will never advertise to you using your data. We will never make a child identifiable to strangers.

Who is responsible for your data: Sandlot is operated by United Under God, Inc., a Georgia corporation. That is the legal entity behind every promise on this page. You can reach a real person about privacy at privacy@unitedundergod.org.

Only parents have accounts

The account holder on Sandlot is always an adult parent or guardian. Children do not get logins, cannot sign in, cannot message anyone, and cannot be contacted through the app. Everything a child does on Sandlot happens through their own parent's account, under that parent's control.

What we collect from parents

• Your email and password — to create and secure your account. Passwords are stored hashed; we never see them.
• A display name you choose (for example, "Dana R.") so other families know who to greet.
• A rough area you optionally type (for example, "Eastside"). Never a street address, and never your exact location.
• An invite code (optional) — only if a friend shared their personal link, so we can connect your families.
• What you do in the app — the meetups you RSVP to or host, and the toys you list to swap.

What we collect about children (and what we deliberately do not)

When you add a child to your account, we store only two things about that child:

• A nickname — a first name or made-up name is completely fine.
• An age group (a developmental band, such as "5–6"), which we use to match kids to age-appropriate meetups and toys.
• An optional cartoon avatar you pick from a fixed set of emoji.

We do not collect a child's last name, date of birth, photograph, home address, phone number, precise location, or any other identifier. There is no field for it and no way to upload a child's photo. When kids list a toy to swap, the picture is always a small cartoon icon of the toy — never a photo of a face.

A child's nickname is visible only to you. Other families at a meetup see the swapped toy (its name and a cartoon icon) — not your child's name and not any identifying detail.

How we use this information

• To run the core service: show you age-appropriate meetups, let you RSVP or host, and let kids list toys to swap at those meetups.
• To keep families safe: review reports, verify places, connection controls, and act on safety concerns.
• To keep the app working and secure: basic technical logs (used only for security and debugging).

We do not use your information to advertise, profile you, or build a marketing list.

Who can see your family's information

• You — always, for your own family.
• Other families at a meetup you join — see only the toys on that meetup's swap board (a toy name and a cartoon icon), plus the meetup's public details. They do not see your child's name or profile.
• Our small team — only to run the service, review a report, investigate abuse, or when the law requires it.
• No one else. We do not share or sell your data to advertisers, data brokers, or any third party for their own use.

Verifiable parental consent (COPPA)

The U.S. Children's Online Privacy Protection Act (COPPA) governs information about children under 13. Sandlot is built around it: the only information tied to a child is a nickname and an age group, and it is entered by the child's own parent, who holds the account. When you add a child, you confirm on that screen that you are the child's parent or guardian and consent to storing that minimal profile; we keep a dated record of that consent.

You are always in control. You can see everything we store about your child right in the app. You can refuse to provide any information, and you can stop at any time.

Your rights — review, delete, and withdraw consent

• Review — you can see your child's nickname and age group in the app whenever you like.
• Delete — to delete your child's profile, or your whole account and everything in it, email privacy@unitedundergod.org and we will remove it promptly.
• Withdraw consent — deleting the child's profile (or asking us to) stops any further collection about that child. You can keep using Sandlot yourself, or close your account entirely.

How long we keep things

• Your account and your child profiles: for as long as you keep your account. After deletion, a full purge happens within 30 days.
• Security logs: a short window, then deleted, unless tied to an active safety investigation.

Security

Family data lives in a database protected by row-level security, so one family can never read another family's private records. We use industry-standard encryption in transit. No system is perfect, but we design for least-possible-data so there is little to lose.

Cookies

We use one thing that acts like a cookie — a session token that keeps you signed in. We do not use advertising cookies or third-party trackers that follow you around the web.

Changes to this policy

If we make a meaningful change — especially anything that would change what we collect about children — we will post it here with a new date and, where we can, tell account holders directly. Small clarifications we will simply publish here.

Reach us

A real person reads our inbox. Email privacy@unitedundergod.org for anything about your data, or care@unitedundergod.org for everything else. United Under God, Inc., Georgia, U.S.A.