Privacy Policy

Effective date: April 20, 2026

Who we are

YoYo Map is operated by DMV Throwers Yo-Yo & Skill Toy Club ("we", "us", "our"), a community yo-yo club operating in the DC, Maryland, and Virginia region. EIN 41-4879324. You can reach us at dmvthrowers@gmail.com.

What this policy covers

This policy describes how we collect, use, and protect information when you use the YoYo Map website at map.dmvthrowers.club. It does not cover other DMV Throwers websites or services.

What we collect

Information you give us

• Display name (public)
• City, region, and country (public)
• Short bio and social media handles you choose to share (public)
• Email address (private — never public)
• Age band: "13–17" or "18+" (private)
• If under 18: parent or guardian name, email, and relationship (private)

Information we collect automatically

• IP address, used only for rate limiting and fraud prevention. Stored for up to 90 days in our audit log.
• User-agent string, stored with parent consent records as an audit trail.

We do not use advertising cookies, analytics trackers, or fingerprinting.

Location

We never ask for or store your exact location. We geocode the city or town you type in to get an approximate center point, then we randomly shift ("jitter") that point by up to 10 miles before storing it. Your displayed pin is not where you live.

How we use your information

• To show your public entry on the map
• To send transactional emails (verification, parent consent, magic login link)
• To enforce rate limits and prevent abuse
• To comply with legal obligations

We do not use your information for advertising, do not sell it, and do not share it with third parties for their own purposes.

Who we share information with

We use these service providers ("sub-processors") to run the site:

• Supabase — database and infrastructure
• Vercel — web hosting
• Resend — transactional email delivery
• OpenStreetMap / Nominatim — geocoding (we only send the city name you typed, no personal data)

We do not share your data with anyone else unless legally required (for example, a valid court order).

Children's privacy (COPPA)

The YoYo Map is not for children under 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not submit an entry.

For users aged 13 to 17, we require verifiable parental consent before publishing their entry. The parent or guardian receives an email with a consent link. No entry is published without that consent. A parent or guardian can withdraw consent at any time by emailing dmvthrowers@gmail.com or by using the magic-link flow on the Manage Entry page, and we will remove the entry.

If you believe we have accidentally collected information from a child under 13, contact us at dmvthrowers@gmail.com and we will delete it promptly.

Your rights

Everyone

• Access and correction: Use the Manage Entry page to view and edit your information.
• Deletion: Use the Manage Entry page to permanently delete your entry and related data. You can also email us.
• Complaints: Email dmvthrowers@gmail.com.

If you are in the EU, UK, or another GDPR region

Under the GDPR you have rights to access, correct, delete, restrict, port, and object to processing of your personal data. Our legal basis for processing is consent (you opted in) and legitimate interest (preventing abuse). You can withdraw consent at any time by deleting your entry. You may also lodge a complaint with your local data protection authority.

If you are in California

Under the CCPA/CPRA you have the right to know what personal information we have, to request deletion, and to opt out of sale or sharing. We do not sell or share personal information. To exercise any right, email dmvthrowers@gmail.com or use the Manage Entry page.

If you are in Virginia

Under the VCDPA you have substantially similar rights. We do not use personal data for targeted advertising, sale, or profiling.

How long we keep your data

• Entry data: until you delete it.
• Parent consent records: 3 years after the associated entry is deleted, to preserve audit trail.
• Audit logs: 90 days.
• Verification tokens: until used or 24 hours (7 days for consent links), whichever comes first.

Security

We encrypt data in transit (HTTPS) and at rest. Row-Level Security policies in our database restrict who can read what. We will notify affected users within 72 hours of discovering a breach that affects them.

International transfers

Our servers are operated by Supabase and Vercel, primarily in the United States. If you submit from outside the US, your data will be transferred to and processed in the US.

Changes to this policy

If we make material changes we will update the effective date at the top of this page. If you have an active entry, we will email you about significant changes.

Contact

Email: dmvthrowers@gmail.com
DMV Throwers Yo-Yo & Skill Toy Club
EIN 41-4879324