Privacy Policy

Last updated: September 15, 2026

KidsMealToys (“we,” “us”) is an independent, community-run service for discovering kids meal toys nearby and arranging toy swaps with neighbors. This policy explains what information we collect, why we collect it, and the choices you have.

Information we collect

• Email address. Used to send sign-in codes and keep your account working across devices. If you choose email as your swap contact, your email is stored with your listings and swap requests and is shared with another member only after you and that member both accept a swap request.
• Swap contact details. You choose how other collectors reach you for swaps: your email address, or your Instagram or X handle. You can save a handle for either platform ahead of time, but only the channel you pick is used for new swaps. The channel (for example, "contact via Instagram") is shown on your listings and requests before acceptance so the other collector can decline a channel they cannot use; the actual address or handle is shared with the other member only after you both accept a swap request, and each listing keeps the contact details it was created with.
• Collector name. The username you choose is public: it appears on your swap listings and requests.
• Store reports. We store the toys, stock state, optional note, and time of each report. If you are signed in, the report is shown under your public collector name unless you check “Post anonymously” on that report; reports posted without signing in are always anonymous. Your email address is never attached to a report, and confirmations (“still true?”) are only ever counted — we never show who confirmed.
• Location. When you let your browser share your location, we use your coordinates to sort stores and listings by distance and to enforce swap radius limits. For swap listings and requests we store an exact coordinate so distance matching works, but that point is never shown publicly: other members only see a distance rounded to the nearest tenth of a mile and the public meetup area you type in yourself. You pick the radius for each listing you create; an “Anywhere” listing is visible to collectors outside your area (for trades by mail), but the same distance-only rule always applies.
• Session cookie. An httpOnly cookie keeps you signed in for up to 30 days. It contains a random token, not your personal details.
• Remembered area. After you share your location, we keep your approximate area (rounded to about a kilometer) in a cookie for up to 180 days, and your browser's local storage keeps your last location and any saved listing spot on your own device. These exist only so the app reopens around your area instead of a default city; they are never shared publicly, and you can remove them at any time by clearing this site's data in your browser.

What we do not do

• We do not sell or rent your personal information.
• We do not run ads or share data with advertising networks.
• We do not track you across other websites or apps.

Service providers

We use Brevo to deliver sign-in emails on our behalf; it processes the email address and message content only for that purpose. Restaurant location data comes from OpenStreetMap and is subject to its terms.

How long we keep information

• Sign-in codes expire after 10 minutes and are stored only as cryptographic hashes.
• Sessions expire after 30 days of validity and are deleted on logout.
• The remembered-area cookie expires after 180 days; the last-location and saved-spot entries in local storage stay until you clear this site's data in your browser.
• Store reports drop out of public view 7 days after their last activity (a confirmation refreshes that window); after that, only a store’s most recent report time can remain visible. Account details and listings are kept until you ask us to delete them or you stop using the service.

Children

KidsMealToys is family-oriented, but accounts are for teens and adults. You must be at least 13 years old (or the minimum digital-consent age in your jurisdiction) to create an account. We do not knowingly collect personal information from children under 13; if you believe a child has created an account, contact us and we will remove it.

Your choices

You can decline browser geolocation and still browse by a default area, and you can clear the remembered area at any time through your browser's site-data settings. You can close your account, request a copy of your data, or ask us to correct or delete it by emailing [email protected]. Deleting your account removes your session and account details; store reports you submitted in the past remain as posted — under the public collector name or anonymous label they carried — and your report confirmations are removed.

Changes to this policy

If we change this policy, we will update the date at the top of this page. Significant changes will be announced in the app before they take effect.

Contact

Questions about privacy? Email [email protected].

KidsMealToys is not affiliated with McDonald's, Burger King, or Wendy's. Store data © OpenStreetMap contributors. See also our Terms of Service.