Privacy Policy

1. Who We Are

Camp Liftoff, Inc. is a 501(c)(3) nonprofit aerospace engineering program for middle school students, based in Bellevue, Washington. This policy describes how we collect, use, and protect information when you use our website (campliftoff.org), parent portal, and registration services.

2. Information We Collect

We collect information you provide directly when you:

• Register a camper — parent/guardian name, email, phone, camper name, age, grade, medical/allergy information, emergency contacts
• Create an account — email address and password (hashed, never stored in plaintext)
• Contact us — name, email, and message content
• Apply for financial assistance — household income information
• Submit forms through the parent portal — responses to health, photo release, and liability forms

We also collect limited technical data automatically: IP address, browser type, pages visited, and timestamps. We do not use third-party analytics trackers or advertising cookies.

3. How We Use Your Information

• Processing camp registration and enrollment
• Communicating with parents about schedules, safety, and camp updates
• Administering financial assistance applications
• Ensuring camper safety (medical/allergy info shared only with on-site staff)
• Improving our program and website

We do not sell, rent, or share personal information with third parties for marketing purposes. Ever.

4. Information About Minors

Camp Liftoff serves students in grades 5 through 8. We collect camper information only through parent or guardian accounts. Campers do not create their own accounts or provide information directly through our website. All camper data is managed by the parent/guardian and by authorized Camp Liftoff staff.

We comply with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent.

5. Photos and Media

Camp activities may be photographed for educational and promotional purposes. Parents sign a photo release form during registration. If you opt out of photo release, your camper will not appear in any public-facing materials. Photos shared through the parent portal are visible only to authenticated parents of campers in the same session.

6. Data Storage and Security

Account credentials are hashed using industry-standard algorithms. Data is stored on secured, encrypted databases. Access to camper and parent information is restricted to authorized Camp Liftoff staff. We use HTTPS across the entire site. We retain registration data for 3 years after a camper’s last enrollment to support returning families, then delete it unless required by law.

7. Third-Party Services

We use the following third-party services to operate:

• Vercel — website hosting
• Supabase — database hosting
• Email delivery service — transactional emails (registration confirmations, password resets)

These services process data only as necessary to provide their function and are bound by their own privacy policies. We do not use Google Analytics, Facebook Pixel, or any advertising-related trackers.

8. Cookies

We use a minimal set of cookies: a session cookie for authentication and a preference cookie for theme selection (light/dark mode). We do not use tracking cookies, and we do not participate in ad networks.

9. Your Rights

You may at any time:

• Request a copy of the personal data we hold about you or your camper
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw photo release consent

To exercise any of these rights, email privacy@campliftoff.org. We will respond within 30 days.

10. Changes to This Policy

We may update this policy as our practices or legal requirements change. Material changes will be communicated via email to registered families and posted on this page with an updated date.

11. Contact

Questions about this privacy policy or our data practices? Contact us: