Pass on kit you no longer need. Receive what you do. Free, always.
Legal
Last updated: March 2026
KitPass ("we," "us," or "our") operates kitpass.club and its community subdomains (collectively, the "Platform"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. We built KitPass with privacy at its core — your data is yours.
When you use KitPass, we collect only what's needed to make the platform work:
Account information: Your email address (used for authentication via magic link), first name, and last initial. Your display name (e.g. "Jules B.") is visible only to fellow members of your community.
Listing content: Titles, descriptions, categories, sizes, brands, conditions, and photos you upload when listing kit. This content is visible only to verified members of your community.
Messages: Messages you send through the KitPass messaging system. Messages are relayed between members — we do not share your email address or contact details with other users.
Community information: If you request a community, we collect your name, email, community name, type, location, website, logo, and any message you include in the request form.
Technical data: We collect basic server logs including IP addresses, browser type, and access times. This data is used for security and troubleshooting only.
KitPass does not collect payment information (the platform is free), does not use advertising trackers, does not use third-party analytics cookies, and does not build user profiles for advertising purposes. We do not sell, rent, or share your personal information with third parties for their marketing purposes. Ever.
We use the information we collect to operate and improve KitPass:
Authentication: Your email address is used to send magic links for secure, passwordless sign-in.
Community membership: Your display name is shown to fellow community members so they know who's listing kit. It is never shown on public pages.
Messaging: We relay messages between members. Your email address is never shared with other users — you choose when and how to share your contact details.
Transactional emails: We send emails related to your account and listings, such as sign-in links, message notifications, and listing expiry reminders. These are not marketing emails.
Community setup: Information submitted in community requests is used to review, approve, and configure your community on KitPass.
Your display name (first name + last initial) is visible to verified members of your community only. It is never shown on public-facing pages such as the landing page, about page, or for-communities page.
Your listings are visible only to verified members of your community.
Your email address is never shared with other users. It is visible only to KitPass administrators for account support purposes.
Messages are visible only to the sender and the listing owner.
KitPass uses the following third-party services to operate:
Supabase (supabase.com) — database, authentication, and file storage. Supabase processes your email address for authentication and stores your account data, listings, and messages. Supabase's infrastructure is hosted on AWS.
Vercel (vercel.com) — web hosting and deployment. Vercel serves the KitPass website and may process basic request data (IP address, headers) as part of normal web hosting.
Resend (resend.com) — transactional email delivery. Resend processes your email address to deliver sign-in links, message notifications, and other transactional emails.
Google Analytics 4 (analytics.google.com) — basic website analytics. We use Google Analytics to understand how visitors use KitPass — page views, session duration, and general traffic patterns. Google Analytics uses first-party cookies and does not track you across other websites. We do not use Google Analytics data for advertising, remarketing, or profiling. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
We do not use Facebook Pixel or any third-party advertising or tracking services.
KitPass uses essential cookies required for authentication and session management, plus first-party analytics cookies set by Google Analytics 4 to understand how visitors use the platform. We do not use advertising cookies, cross-site tracking cookies, or third-party marketing cookies. Google Analytics cookies are first-party only and do not track you across other websites.
Your data is stored securely via Supabase, which uses encryption at rest and in transit. Listing photos are stored in Supabase Storage. We use HTTPS for all connections. Access to administrative functions is restricted to authorized KitPass personnel.
You have the right to:
Access your data: You can view your profile information and listings at any time through the KitPass interface.
Correct your data: You can update your display name through the profile panel.
Delete your account: You can delete your account through the profile panel. This removes your profile data and disassociates your listings. To request complete data deletion, email us at hello@kitpass.club.
Data portability: You can request a copy of your personal data by emailing hello@kitpass.club.
California residents: Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), you have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. KitPass does not sell your personal information. To exercise these rights, email hello@kitpass.club.
International users: If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under GDPR including the right to restrict processing and the right to object to processing. Contact us at hello@kitpass.club to exercise these rights.
KitPass is designed for use by parents, coaches, and community organizers. The platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@kitpass.club and we will delete it.
We retain your account data for as long as your account is active. Listing data is retained for 60 days after listing creation unless renewed. Expired listings are archived and may be permanently deleted after an additional 90 days. Messages are retained for the lifetime of the associated listing. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it.
KitPass is operated from the United States. Your data is primarily stored and processed in the United States via our service providers. If you access KitPass from outside the United States, you consent to the transfer of your data to the United States. For users in the EEA or UK, we ensure that appropriate safeguards are in place for international data transfers in accordance with applicable data protection laws.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the announcement bar on KitPass or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.
If you have questions about this Privacy Policy or your personal data, contact us at:
Email: hello@kitpass.club
Pass on kit you no longer need. Receive what you do. Free, always.
Built by parents, from the same sideline.