Legal draft

Privacy policy.

Last updated May 17, 2026. This policy is drafted for a parent-led application process and needs legal review before collecting information from families.

Because the program involves children, videos, letters, and possible live streams, the final workflow should be reviewed for COPPA, state privacy rules, platform rules, and consent requirements.

Scope

This Privacy Policy explains how [Organization Legal Name] collects, uses, stores, and shares information through the First Break website, application process, donation process, verification calls, and live hobby box openings.

The project is designed so a parent or legal guardian submits the application. Children should not submit applications, contact information, videos, or letters without their parent or legal guardian.

Children's privacy

We do not knowingly collect application information directly from children without parent or legal guardian involvement. For children under 13, we require verifiable parent or guardian consent before collecting, using, or publicly sharing personal information.

Personal information can include names, contact information, photos, videos, audio recordings, written stories, shipping information, and other information connected to a child or parent.

Information we collect

  • Parent or legal guardian name, email address, phone number, and consent records.
  • Child's first name, age, state, collecting interests, sport preference, video, and letter.
  • Verification call scheduling information and notes needed to confirm eligibility.
  • Shipping name and address from selected families after final selection.
  • Donation details such as donor name, contact information, donated product information, and payment records.
  • Basic website information such as browser type, device data, pages visited, and security logs if analytics or hosting tools are enabled.

How we use information

  • To review applications and determine eligibility.
  • To contact parents or legal guardians about applications, finalist verification, and live opening logistics.
  • To conduct verification calls and reduce fraudulent, duplicate, or AI-generated entries.
  • To schedule, stream, record, promote, and recap live openings when the required release has been signed.
  • To ship cards and related materials to selected families.
  • To process donations, manage inventory, improve the website, maintain security, and comply with legal obligations.

How we share information

We do not sell applicant information. We may share information with service providers that help operate the program, such as form tools, cloud storage, email, shipping providers, payment processors, video call tools, streaming platforms, website hosts, and professional advisors.

We may publicly share a child's first name, age, general location, application story, video, letter, likeness, voice, live opening footage, and related content only as allowed by the parent or guardian release and consent.

Security

We use reasonable administrative, technical, and physical safeguards for the size and nature of the project, including restricted account access, strong authentication, limited reviewer permissions, private storage, and deletion procedures for old submissions.

No website, form, cloud storage system, email account, or video platform can be guaranteed completely secure. Families should avoid submitting sensitive information that is not required by the application.

Retention

We keep application information only as long as needed for application review, verification, program records, legal compliance, fraud prevention, and approved promotional uses. Non-selected applications should be deleted or de-identified on a published schedule after each application cycle.

Parent and guardian rights

Parents and legal guardians may request to review, correct, or delete their child's application information, subject to legal, security, fraud-prevention, and recordkeeping needs. They may also ask us to stop future public use of a child's content where reasonably practical.

Contact

Privacy questions and parent requests can be sent to [privacy email] or mailed to [organization mailing address]. Replace these placeholders before launch.