Privacy Policy

Last updated: June 17, 2026

TinyList collects the minimum we need to run a directory of kids activities and connect parents with businesses. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

  • Account information — your name and email when you create a parent or business account, and business details when you add or claim a listing.
  • Inquiries— the contact details and message you submit when you reach out to a business (name, email, optionally phone, your child's age, and timing preferences).
  • Reviews and content — the ratings, text, and any photos you choose to submit.
  • Usage data — basic, non-identifying analytics like page views and search terms, plus cookies that keep you signed in and remember your preferences.

How we use your information

  • to operate the directory and your account;
  • to deliver your inquiries to the businesses you choose to contact;
  • to display reviews and keep listings accurate and useful;
  • to send account and service emails (confirmations, password resets, inquiry notifications);
  • to understand how the site is used so we can improve it, and to keep TinyList secure.

Messages you send through TinyList

Messages between parents and businesses sent through TinyList may be reviewed — by automated safety checks and, where necessary, by our team — onlyto protect users' safety (including preventing scams, harassment, and risks to children), to comply with legal obligations, and to provide support. We do not review your messages for advertising or marketing, and we don't sell them. See our Content Policy for what's allowed.

When we share information

With businesses you contact. When you submit an inquiry, we share your message and contact details with that specific business so they can reply. We don't share your contact details with a business until you reach out to them.

With service providers. We rely on a small set of vendors to run TinyList, each acting on our behalf under their own terms and privacy policies:

  • Supabase — database and authentication;
  • Vercel — hosting;
  • Resend — transactional email;
  • Google Maps Platform — maps and address lookup;
  • Stripe — payment processing for paid business tiers (when applicable).

For legal reasons. We may disclose information if required by law or to protect the rights, safety, or property of TinyList, our users, or the public.

What we don't do

We don't sell your personal information, and we don't use third-party advertising trackers.

Cookies

We use cookies for authentication (keeping you signed in) and to remember preferences like your filters. We don't use them for cross-site advertising.

Children's privacy

TinyList is for parents, caregivers, and businesses — it is not directed to children and is not intended for use by anyone under 18. We don't knowingly collect personal information from children. If you believe a child has provided us information, email us and we'll remove it.

How long we keep information

We keep your information for as long as your account is active or as needed to provide the service, resolve disputes, and meet legal obligations. When you ask us to delete your account, we remove or anonymize your personal information except where we're required to retain it.

Your choices

You can review and update your account information at any time. To request a copy of your data or to delete your account, email us at hello@tinylist.co. Depending on where you live, you may have additional rights over your personal information; contact us and we'll help.

Security

We use reputable providers and reasonable safeguards to protect your information. No online service can be perfectly secure, but we work to keep your data safe and to address issues promptly.

Changes to this policy

We may update this policy as TinyList evolves. We'll update the date above and, for substantive changes affecting account holders, notify you by email.

Contact

Questions about your privacy? Email us at hello@tinylist.co.