Last updated: October 28, 2026
Santa Ride is operated by Continuance Labs LLC (“we,” “us”). This policy explains what information we collect when you use santaride.app, its subdomains, and the embeddable widgets fire companies place on their own websites (together, the “Service”), and what we do with it.
Santa Ride is in an early pilot. Features change often, and we update this policy when they change what we collect or how we use it.
Fire companies and other community organizations (“Organizations”) use Santa Ride to plan events and publish event pages. When you interact with an Organization's event page — signing up for reminders, posting in live chat, submitting a photo, or turning on push notifications — we process that information on the Organization's behalf, and the Organization can see and use it (for example, it can export its reminder list). Each Organization is responsible for how it uses the information it receives, so you may also want to contact the Organization directly.
Account information. Your name, email address, and password (stored only as a one-way hash), the Organizations you belong to and your role, and your email notification preferences.
Organization information. An Organization's name, address, phone number, email, website, logo and branding, and the names, titles, and contact details of the people it lists as contacts.
Event and operations data. Routes, stops, schedules, road closures, vehicles, volunteer roles and assignments (including notes), task lists, and similar planning information that Organizations enter.
Location from live tracking. When an Organization runs live tracking, the tracking device (a phone or GPS unit traveling with the event) sends its location, speed, heading, and accuracy. We show this on the public event page during the event and keep a history so the Organization can replay the route afterward. Public event pages do not ask visitors for their own device location.
Reminder sign-ups. Your email address and, if you give it, your name. We send a confirmation email first and only send reminders once you confirm. If you unsubscribe, we keep a record of your address and the date you unsubscribed so we don't email you again.
Push notifications. If you turn them on, your browser gives us a subscription address and keys for its push service, along with your browser's user agent and the stops you chose to follow.
Live chat. The display name you choose, your messages, and your IP address. We use the IP address to prevent abuse, and the Organization's event moderators can see it so they can mute disruptive posters. Your display name is kept in your browser so you don't have to retype it.
Photo submissions. Your name, email address, the photo, its file name, and any caption. The Organization reviews submissions before anything is published.
Contact and support. What you send us through contact or interest forms (such as your name, email, phone, department, and message) and the content of support requests and replies.
Usage and technical information. Pages viewed, referring page, browser user agent, and timestamps. We use your IP address briefly to count page views and to limit abusive traffic; the rate-limiting records we keep store a one-way hash, not the address itself. Our hosting provider also keeps standard server logs.
Payments. When paid plans are offered, payments are handled by Stripe. We do not receive or store full card numbers. We keep the Stripe customer and subscription identifiers and the subscription status for the Organization.
We do not sell personal information, and we do not use it for targeted advertising.
We keep information for as long as the related account, Organization, or event exists. When an Organization deletes an event or other item, it can be restored for 30 days, and then the record is permanently deleted along with information attached to it, such as its location history, chat, reminder sign-ups, and photo submission details. Photos the Organization has approved stay in its photo library until it deletes them, and image files may remain in our file storage after the related record is deleted; you can ask us to remove them. Page-view records are deleted after 90 days. Other records, such as support conversations, may be kept longer where we need them to provide support, resolve disputes, or meet legal obligations. You can ask us to delete information sooner (see below).
Depending on where you live, you may have additional rights under local law. We will respond to requests as required by the law that applies to you.
The Service is meant for Organizations and adults. Event pages are for whole communities, including families, but the Service is not directed to children under 13 and we do not knowingly collect personal information from them. Reminder sign-ups, chat, and photo submissions should be done by an adult. If you believe a child under 13 has given us personal information, contact us and we will delete it.
We use reasonable safeguards, including hashed passwords, encrypted connections, access controls that separate each Organization's data, and logging of administrative changes. No method of transmission or storage is completely secure, and we cannot guarantee the security of information.
We are based in the United States and our service providers process information in the United States and other countries.
We may update this policy. We will post the new version here with a new “Last updated” date, and if a change is significant we will give account holders notice, such as by email or in the app.
Continuance Labs LLC
Email: admin@santaride.app