Privacy

What we collect

Three things: your email address, your answers to the survey questions and your first name if you choose to give it.

We also record which organization, team and season your survey link was for, and whether you answered as a parent or as a coach. The first name is optional. Nothing on the survey requires it.

What we publish

Three things reach the public site:

• Your ratings, counted inside an organization's averages. A single rating is never shown on its own.
• Your written comments, after a moderator has read them.
• The words Verified Parent or Verified Coach, alongside the season you answered about.

Nothing else.

What we never publish

Your name and your email address never appear on the public site. Neither does anything else that would identify you.

The organization you reviewed sees its averages and the themes in its comments. It never sees who wrote what. If it disputes a response, we confirm whether that response was verified. We do not tell it who sent the response.

Our promise

Your identity is never displayed publicly.

That sentence is the whole commitment, and it is deliberately narrower than the wording used in some earlier material about this project. We do collect information that identifies you. A rating only means something if we can confirm a real person sent it. What we promise is that the information stays off the public site and away from the organization being reviewed.

How verification works

You answer the survey first. At the end you give us an email address and we send a 6-digit code to it.

Entering that code is what makes your response count. Until you enter it, nothing you typed is published and nothing is counted in an organization's averages. The code stops working ten minutes after we send it. If it expires, you can ask for another one.

The code is also the reason a review can carry a verified label. Without it, one person could rate an organization as many times as they liked, and the label would mean nothing.

Deleting your response

Ask us to delete your response and we erase your name, your email and your written comments, while your ratings stay in the organization's averages.

In detail: we delete the record holding your email address and your name, and we erase the text of every comment you wrote. Your ratings stay, because they are already part of a published average and removing one response would change a score other people have read.

We keep one thing, and we would rather tell you than let you assume otherwise: a one-way fingerprint of your email address. It is a fixed-length code produced from the address, and it cannot be turned back into an address by us or by anyone who obtains it. It exists for a single reason. Without it, a deleted response could be replaced by a new one from the same address, and one person would count twice in an organization's score.

A deleted response cannot be restored. We cannot undo it, because the information needed to rebuild it is the information we destroyed. To ask for a deletion, use the contact route in Contact below.

Seeing what we hold

Canadian privacy law gives you the right to ask what personal information we hold about you and to receive a copy of it. Ask through the contact route in Contact below.

We answer within 30 days. In the first season we assemble these by hand, so expect a reply from a person rather than an automatic download.

Cookies

The survey sets one cookie, named ysr_draft. It holds your in-progress answers so you can close the page and come back to the same link without losing them. It is set only on the survey path and it is marked httpOnly, so scripts running in the page cannot read it. It carries no advertising or tracking data. The survey does not work without it.

The public production site also loads Google Tag Manager, which we use to measure how many people start a survey and how many finish. It does not run on preview builds or in our tests.

Who processes your data

Three companies handle part of this on our behalf. Each sees only what its job requires.

• Supabase hosts the database holding your answers, your email address and your name.
• Cloudflare Turnstile runs the security check on the verification step. It sees a signal from your browser indicating you are not an automated script. It does not see your answers.
• Postmark sends the email carrying your 6-digit code. It sees your email address and the code. It does not see your answers.

We do not sell your information and we do not send marketing email. The only message we send you is the one carrying your code.

If something is wrong

Tell us if you think a published review is inaccurate, if a comment names an individual or if anything on this site raises a concern about a child. Moderators read every comment before it appears, and comments naming individuals are not published.

A concern about an organization should never have to travel through that organization. The direct address that makes that possible is not published yet, and putting it here is one of the items that has to be closed before this site opens to the public.

Contact

A direct address for deletion requests, access requests and concerns is not published here yet. It appears in this section before this site opens to the public.

Until then, use the contact form. It reaches the people who run this site directly, with no organization in the middle, which is what makes it the right route for a concern about the organization itself.