Privacy Policy

Last updated: July 23, 2026

Vendvera is a searchable directory of California homeschool charters’ published approved-vendor lists. You can browse everything on this site without an account and without giving us any personal information. This policy explains what we collect when you choose to participate, why, and what we do with it.

What we collect, and why

• Sign-in email. Creating an account means typing your email and clicking a sign-in link we send you. No passwords. We use your email to sign you in and to tie your contributions to a real person. It is the only thing an account requires.
• Sign-in activity. When you ask for a sign-in email and when you finish signing in, we record that it happened, whether you used the code or the link, and what part of the site you were heading to. We store a scrambled version of your email address rather than the address itself, which lets us match a sign-in request to the sign-in that completes it. When you finish signing in, that record is linked to your account. We use this only to see whether signing in actually works for people. These records are deleted automatically after 12 months.
• Reviews. A star rating, the review text you write, and (optionally) which charter you used the vendor through, linked to your account. Reviews are displayed publicly without your name or email. Visitors see the rating, the text, the charter, and the date only.
• Vendor confirmations. A one-tap “my family used this vendor” note (vendor + charter), linked to your account and shown publicly only without identity.
• Saved vendors. If you save a vendor to your list, we record which vendor and when, linked to your account. Your saved list is private: only you can see it. It is never shown publicly, never shared with the vendor, and never used to rank search results.
• Contact taps. If you’re signed in and tap a vendor’s website, phone or email on its page, we record which vendor, which of the three, and when, linked to your account. Like your saved list it is private: never shown publicly, never counted, never shared with the vendor, and never used to rank search results. We delete it after 12 months, and with your account.
• Vendor requests. The vendor you’re asking about. Requesting requires signing in, so the request is attached to your account. We ask for no name and no separate email address.
• Problem reports. What’s wrong with a listing, plus your email only if you choose to give it, used solely to follow up while checking the report.
• Vendor claims. If you claim a listing as its owner or manager, we record your account email as the claim contact and any note you include. The public page shows that the listing is claimed, not your email. If you tell us a claimed listing is your business, we keep your account email and the note you include. Only you and Vendvera can see them; the account that claimed the listing can’t. If you ask us to hide details on a listing or to remove one, we keep your account email, what you asked for and any note you include. Only you and Vendvera can see them. If you manage a listing, we also keep three things with your account: which notices on your listing you’ve dismissed, that we’ve shown you the suggestion to share your page, and any charter you’ve told us you’re not accepting students from. These are private: only you can see them, and none of them appears on your page. If you manage a listing, or ask to, we email you about it: a welcome when your claim goes through, and what happened to a request you made, such as a claim, a name change or a charter you told us about. We also send reminders about your page, and news when a family confirms they use you or leaves a review. You can turn either off. We keep a record of each of those emails (which kind, which listing and when), your two email choices, and a private key that lets the link in our emails open your email preferences without signing in. Anyone who has that link can change those two choices and nothing else. All of it is deleted with your account.
• Sharing your page. When you copy one of the ready-made messages for sharing your page, we count it: which listing, which kind of message (email, text, Facebook, Instagram or newsletter) and when. We don’t record the message, who you send it to, or your account.
• Searches. When you search, we record the words you typed and how many results came back, never who you are. We use this to find what parents look for and don’t find, so we know which vendors to add next.
• Hosting logs. Like nearly every website, the services that run this site keep standard server logs (such as IP address and browser type) for security and reliability. We do not use them to profile you.

What we don’t do

• We do not sell your personal information.
• We show no ads and use no advertising networks.
• We use no cross-site trackers. For visitor counts we use Vercel’s cookieless analytics. Vercel already hosts this site, so no new company receives your data.
• We share personal information with no one except the service providers below, and only so they can run the site for us.

Who processes it

• Supabase: our database and sign-in provider. It stores everything listed above.
• Vercel: hosts the site, keeps standard server logs, and provides the cookieless visitor counter described above.
• Resend: delivers our email. That means the sign-in links and codes, and, if you ask us to add a vendor and leave the setting on, one message telling you when it goes live. It receives your email address and the text of those messages, and nothing else. You can turn the vendor-request message off under Settings on your account page; sign-in emails you cannot turn off, because they are how signing in works. It also delivers the emails about a listing you manage or asked to manage. You can turn Reminders and Family news off under Settings on your account page, or from the Email preferences link in any of those emails. Emails about a request you made cannot be turned off.

Cookies and local storage

We use no advertising cookies. When you sign in, your session is kept in your browser’s local storage so you stay signed in; signing out clears it.

We also store a couple of random IDs in your browser’s storage: strings of characters with no personal information in them. They let us count how many searches happen in a visit and whether people come back on a later day, without knowing who anyone is. They are not linked to your account, and clearing your browser’s site data removes them.

Our hosting providers may set strictly functional cookies needed to serve the site. Because we don’t track you across other websites, we do not respond to “Do Not Track” browser signals. There is no cross-site tracking here to turn off.

Retention and deletion

We keep your information while your account exists or while it’s needed for the purpose you gave it (for example, an open vendor request). You can delete your own reviews and take back your own confirmations at any time from your account page. To ask us to delete your account, your contributions, or an optional email you provided on a form, contact us at [contact email: finalized with the Phase 3 email setup] and we will process the request promptly and manually.

Search records, sign-in activity records, and the random browser IDs described above are deleted automatically after 12 months.

Children

This site is for parents, guardians, and educators. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Changes

If this policy changes, we will post the new version here and update the date at the top. A material change to what we collect or share will be called out conspicuously on the site.

Contact

Privacy questions or requests: [contact email: finalized with the Phase 3 email setup].