Privacy Policy

Last updated: March 28, 2026

1. Information We Collect

Account Information

When you create an account, we collect your email address and display name. Authentication is handled through Firebase Authentication (operated by Google).

Troop & Inventory Data

When you use Cookie Mom, you may enter cookie inventory counts, transaction records (checkouts, check-ins, booth sales), troop member names, and troop settings. This data is stored to provide the Service.

Pickup Scheduling

If your troop uses the pickup scheduling feature, parents or guardians who book pickups provide their name, email address, and cookie selections. A confirmation code is generated for managing their booking.

What We Don't Collect

We do not use analytics or tracking tools. We do not use advertising cookies or third-party trackers. We do not collect location data, device fingerprints, or browsing behavior.

2. How We Use Your Information

We use your information solely to:

  • Provide and operate the Cookie Mom service
  • Authenticate your identity and secure your account
  • Send transactional emails (e.g., pickup booking confirmations)
  • Respond to your support requests

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. How We Store Your Data

Your data is stored using Google Cloud services through Firebase:

  • Firebase Authentication — securely manages your login credentials
  • Cloud Firestore — stores your troop data, inventory, and transactions

The application is hosted on Cloudflare Pages. Transactional emails are sent through the Resend API via a Cloudflare Worker — email content is not stored after delivery.

All data is transmitted over encrypted connections (HTTPS/TLS).

4. Email Communications

We send only transactional emails — such as pickup booking confirmations and modification notices. We do not send marketing emails or newsletters. You will only receive emails directly related to actions you or your troop members take within the Service.

5. Data Retention & Deletion

We retain your data for as long as your account is active. If you wish to delete your account and all associated data, contact us at [email protected] and we will process your request promptly.

Troop data is shared among troop members. If you are the sole member of a troop and request deletion, all troop data will be removed. If other members remain, the troop data will persist for their use, but your personal account information will be deleted.

6. Children's Privacy

Cookie Mom is designed for use by troop leaders, volunteers, and parents — not by children directly. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your troop data (CSV export is available within the app)

To exercise any of these rights, contact us at [email protected].

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users via email. The "Last updated" date at the top reflects the most recent revision.

9. Contact Us

Questions about this policy or your data? Reach out at [email protected].