Privacy Policy

When you become a member:

• Your name, family name, and the names of parents or guardians
• Email address and phone number
• Home address, so we know which branch serves you
• How you heard about us, and whether you're interested in volunteering
• Membership dates, payment method and notes, and whether a scholarship applies

About your children:

• First name and either a birthdate or just a birth month — we ask for age so we can recommend age-appropriate toys. If you'd rather not give a full date of birth, give us the month and year instead; the system is built to accept that.

When you borrow:

• Which toys your family has checked out, when, and when they came back

When you use the site or sign in:

• Your email address if you subscribe to the newsletter, and your name if you give it
• Anything you type into the contact form, so we can reply
• Basic sign-in records — the times you signed in and the IP address used — which help us spot unauthorized access to an account

We collect children's names and ages from the parent or guardian who creates the membership — never from a child directly. Our site is not designed for children to use on their own, and we don't knowingly collect information from a child. We ask for the least we can: a first name and an age, and a birth month is enough if you prefer. If you believe a child has given us information directly, email us and we will delete it.

• To run the lending library — track loans, returns, and memberships
• To contact you about items you've borrowed, and about your membership
• To recommend toys suited to your children's ages
• To send newsletters, if you asked for them
• To understand, in aggregate, how the library is used so we can improve it

We do not use your information for advertising, and we do not sell or rent it to anyone.

We use a small number of service providers to operate the library. They process data on our behalf, and only for that purpose:

• Cloudflare — hosts the website and the database
• Amazon Web Services (SES) — delivers our email
• Google, Apple, and Facebook — only if you choose to sign in with one of those accounts. We receive your email address and name from them; we never receive your password.
• Stripe — processes the library's own software subscription. Stripe does not receive member information.

We may also disclose information if the law requires it, or if it's necessary to protect someone's safety.

We keep membership and borrowing records while you are a member and for a reasonable period afterward, so that a returning family doesn't have to start over and so we can reconcile our collection. Newsletter subscriptions are kept until you unsubscribe. Ask us to delete your information sooner and we will, except where we need to keep a record of an unreturned item.

• See or correct your information — sign in to your account, or email us
• Unsubscribe — every newsletter has an unsubscribe link, and it takes effect immediately. Unsubscribing from the newsletter does not stop essential messages about items you've borrowed.
• Delete your account — email us and we'll take care of it

Data is transmitted over encrypted connections and stored with our hosting provider. Passwords are stored hashed, never in plain text. No system is perfectly secure, but we keep what we collect small deliberately — the information we never gather can't be exposed.

If we change how we handle information, we'll update this page and the date at the top. If a change is significant, we'll tell member families directly.

Questions about your privacy, or a request to see or delete your information: mntoylibrary@gmail.com.