Privacy
Privacy policy
Your privacy, and the privacy of the children we serve, matters to us. This page explains what we collect, why, and how long we keep it.
Last updated: October 2, 2026
What we collect
We only collect what you choose to send us through this website:
- Contact form: your name, email address, phone number if you give one, and your message.
- Volunteer form: your name, contact details, mailing address, and how you'd like to help.
- Event registration: the parent or guardian's name, phone number and email address, an optional second parent, the agency that referred you (if any), how you'd like us to contact you, and each child's first name and age.
- Club Members accounts: CYD volunteers who sign in to the members area have a name, email address and password (stored scrambled, so no one can read it). When someone signs in to the members area, or tries to, we record the time, the browser and device, and a shortened internet address with its last part removed (for example 73.45.112.x), so misuse stands out.
How we use it
We use your information only to respond to you and to run our events: to plan how many children to expect, to send your registration confirmation, reminders before the event, and word of any changes, and to call you if you asked us to.
Only signed-in CYD Club Members can see registrations and messages. We never sell, trade or rent your information. We share it only with the services that run this website for us:
- Hostinger, which hosts the website and its database in the United States, and our info@cyd-dupage.org mailbox (Titan email), which sends most of the website's emails (confirmations and replies).
- Brevo, which delivers event reminders and updates, and sends the website's other emails if our mailbox can't.
- Google Analytics, which gives us visit statistics if you agree (see below). It never receives your name, email address, phone number or anything you type into our forms.
- commented.io, a comments tool our reviewers use to leave notes on the website's pages (see Cookies).
Children's privacy
We don't collect information directly from children. A parent, guardian or referring agency gives us each child's first name and age so we can plan activities and gifts for the right age groups. We don't ask for children's last names, photos, or school information on this website.
How long we keep it
- Event registrations are deleted 18 months after the event, long enough to plan the next year's event.
- Contact and volunteer messages are deleted after 2 years.
- Copies of the emails the website sent are deleted after 18 months.
- The record of sign-ins and of changes made in the members area is deleted after 3 years, sooner if it grows large. It describes sign-ups and messages without names (“a family signed up”).
This happens automatically every night. Our backups, kept so we can recover from a problem, are stored securely and are replaced by newer backups over time.
Cookies
This website uses a small cookie that keeps forms secure and keeps Club Members signed in, and Club Members' browsers get one more so we can notice a sign-in from a new device. They aren't used to track you.
While the website is being reviewed, a comments tool from commented.io runs on every page so reviewers can leave notes. It's part of how we look after the website, so it's always on.
Google Analytics sets cookies to count visits, and it runs only if you say yes. A small box in the corner of the page asks the first time you visit, and remembers your answer for a year in a cookie of its own. You can change your mind at any time with Cookie settings at the bottom of every page. If your browser sends a “Global Privacy Control” signal, we don't load Google Analytics at all.
Videos
Some pages show YouTube videos. Until you press play, you only see a picture stored on our own website, and nothing is sent to YouTube. When you press play, the video loads from YouTube in its privacy-enhanced mode, and YouTube's own privacy policy applies.
Visit statistics
We use Google Analytics to see how many people visit, which pages they find useful, and whether they came from a search or a link. This helps us improve the website. We also count a few actions, like a finished registration (with the event's name and how many children, never names or contact details) or a video being played. Google's advertising features are turned off, and Google Analytics doesn't run in the Club Members area.
Donations
We don't take payments on this website. If you give by check, Zelle or another service, that payment is handled by your bank or the service you use.
Links to other websites
Our website links to partner organizations and other sites. They have their own privacy policies, and we aren't responsible for their content or practices.
Your choices and questions
You can ask us to show you, correct or delete the information we have about you or your children at any time. Use the contact form or email info@cyd-dupage.org.