Privacy Policy

1. Who we are

Magic House Points (“the Service”) at magichousepoints.com is operated by Seamless Events & Marketing LLC, St. Louis, Missouri, USA (“we”, “us”). Questions about privacy go to .

2. What we collect

• Grown-up accounts: your email address, the first name and family title you choose (for example “Professor Mom”), and the school you belong to. If you use optional password sign-in, Supabase processes your password to authenticate you. The app does not save passwords in browser storage or logs.
• Your school: its name and the grown-ups who belong to it.
• Children’s houses: the name you enter for each child, their house name, house color and crest animal. The other Sorting answers (talent and castle place) are only used to suggest a name and are not saved.
• The Book of Records: each entry’s points, reason, the name of the grown-up who recorded it, the date and time, and an optional photo.
• Links: invite links and view-only links, who created them and when, and whether they were used or revoked.
• Technical logs: our hosting and database providers keep standard logs, such as IP addresses and request times, to run and secure the Service.

3. How we use it

To run the Service: signing you in, showing your school’s scoreboard and Book of Records to the people allowed to see it, sending sign-in codes, and keeping the Service secure and working. We use Vercel Web Analytics to count page visits. We remove URL query strings and fragments before sending analytics, so invite links, view-only access tokens and email sign-in tokens are excluded. We do not sell your data, show ads, or use your data for advertising.

4. Who can see your school

• Grown-ups in your school can see everything in it.
• Anyone with an active view-only link can see the scoreboard, house names, the points feed and photos, but cannot change anything. Share these links only with people you trust, and revoke them when no longer needed.
• Other schools cannot see your school. Access rules in our database keep each school’s data separate.

5. Children’s privacy

The Service is for grown-ups. Children do not create accounts and we do not knowingly collect personal information directly from children under 13. A parent or guardian decides what to enter about their own children. We recommend using first names or nicknames, and taking care with photos that show faces or identifying details.

If you believe a child’s information was entered without a parent’s permission, email and we will delete it.

6. Services we use

These providers receive only what they need to do their job (for example, Google, jsDelivr and Cloudflare see your IP address when your browser loads fonts, code or the sign-in check from them).

7. Cookies and device storage

We don’t use tracking or advertising cookies. The Service uses your browser’s local storage to keep you signed in, remember your preferences and an invite link while you sign in, and keep a pending award’s details until its result is confirmed. Signing out clears that account’s pending award from this browser. Native iPhone builds also keep your personal connection key and any unconfirmed save result in device-only secure storage. Native screens do not use analytics, and website analytics are blocked inside the native school view. You can clear browser storage at any time; this signs you out and removes any unfinished local award copy.

8. Deleting your account and data

Saved points entries aren’t edited individually. You can delete your account and its recorded entries in the app, or request deletion of personal data by email.

• Deleting your account: open Menu → Settings → Your account and choose Delete my account; it happens immediately. If you haven’t joined a school, open Your account on the school setup screen. Or email from the address you sign in with and we will do it within 30 days. Deleting your account also removes the entries you recorded in every school, including their reasons and photos. Their points are removed from current totals. Other grown-ups’ entries stay unless the whole school is deleted. Finished challenge summaries remain as historical totals without identifying the deleted grown-up.
• Deleting your school: when the last grown-up in a school deletes their account, the school and everything in it, including all entries and photos, is deleted with it. If every grown-up in a school asks us by email, we will delete it for them.
• Backup copies kept by our database provider may take extra time to expire after deletion.

We keep your data for as long as your account or school exists.

9. Your rights

You can change your name and delete your account yourself in Settings. You can also ask to see, correct, export or delete your personal data by emailing . We will respond within 30 days. Depending on where you live (for example the European Union or California), you may have additional rights; we honor access and deletion requests wherever you are.

10. Security

All connections use HTTPS. Database access rules limit each school’s data to its own grown-ups and its active view-only links, and the server, not your browser, records who gave each entry and when. No system is perfectly secure, so we can’t guarantee absolute security.

11. Changes to this policy

If we make important changes, we’ll update the “Last revised” date and post a notice on the site. Using the Service after changes are posted means you accept them.

12. Contact