Privacy

Short version: no accounts, no tracking of where you walk, and we don’t knowingly collect anything from children.

Effective October 5, 2026: we no longer accept photo uploads. If we change this policy we’ll update this date and note the change here.

What we collect

• Email and city or town, only if you ask for a reminder. A reminder is one email on your town’s trick-or-treat day (Halloween for city pages), sent through our email provider (Resend). We use it for nothing else, delete it on Nov 2, 2026, and delete any later sign-ups by Dec 31, 2026.
• Your street and email, if you pledge your porch. We only ever show a count per street (once 3 homes pledge), never your house. The email is kept only so you can ask us to delete your pledge; we never write to it. Deleted by Dec 31, 2026.
• Street suggestions you send us, deleted after 180 days.
• Street tips, thanks, votes and safety flags you post. Tips are checked before they appear, by a person or by an AI service (Anthropic). Rejected tips are not shown and their text is deleted. Anyone can report a tip; reports from three different households hide it right away. Community posts are deleted within 60 days. We don’t accept photo uploads.
• Event listings from businesses and organizers (event details plus a contact email that is never shown), deleted after 180 days.
• Removal and problem reports about a street, deleted after 180 days.
• Partner inquiries (business email and message), deleted after 180 days. Costume groups (one nickname per person, no photos), deleted after 21 days.

What we never collect

• Your location. On Halloween night you pick your street from a list. The “Near me” button on the hours page can use your device’s location, only if you allow it, to sort towns by distance; it stays in your browser and is never sent to us.
• Personal information from children. Trick or Treat Hours is for parents and adults and isn’t directed to children; we don’t knowingly collect personal information from anyone under 13. If you think a child sent us something, contact us and we’ll delete it within 7 days.
• Advertising or cross-site tracking cookies.
• Cookies of any kind. Our optional analytics is cookieless and doesn’t store IP addresses, so there is no consent banner.

Identifiers

Our analytics uses a random ID that lasts only while your browser tab is open. To stop spam and count each household once, we keep one-way, salted hashes of your network address (never the address itself). We use these only to run the site: never to contact you, build a profile or show ads. A hash is deleted with the record it’s attached to: live reports after 1 day; tips, votes and flags within 60 days; porch pledges by Dec 31, 2026. Your browser also remembers whether you turned the sound on (local storage); that stays on your device.

Services that handle data for us

Supabase (database), our web host, Resend (reminder emails), Anthropic (automatic checks of tips and event listings, when turned on), Cloudflare Turnstile (bot check), PostHog (cookieless page analytics), OpenFreeMap (map tiles; it receives your IP address to send the map) and Sentry (error alerts, sent from our server with only the page and error type, no personal data). None of them may use your data for their own purposes or for ads. Anthropic handles tip text under its commercial API terms. We don’t sell personal information, and we disclose it only to these services, only for the jobs listed.

Do Not Track and Global Privacy Control

We don’t track you across sites, so the site works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

Parents

You can ask to see or delete anything your child sent us, and tell us not to collect more, using the contact below. We respond within 7 days.

Delete my data

Email hello@hitxtrial.com from the address you signed up with and we’ll delete everything within 7 days. Tips, votes and live reports aren’t linked to an email, so to remove one, tell us the street, roughly when you posted it, and what it said.