Privacy
Version 2026-09-01 · Superfan Deals, LLC · hello@directily.com
The short version
We collect what it takes to sign you in, take a payment, pay a family, and let a business count a redemption — and not much else. A kid’s page never shows more than a first name and an activity. Kids never sign in and cannot be messaged. We do not sell your data and there is no advertising tracker on this site.
What we collect, and why
From a member: your email address, your name if you give one, the billing address your card is verified against, your membership amount and billing history, and which deals you redeem and when. The email and the address are required — the first is how you sign in, the second is how a card payment is verified. Your birthday month and day are optional, and exist only so a business can offer you a birthday freebie; the year is optional on top of that.
From a parent: your name, email, mobile number, an optional family last name, and the organization your kids take part in if you name one. The mobile number and the email are how a superfan who already knows you can find your family — they must also know a name in your family, and you approve every request.
About a kid: a first name, an activity, an optional goal line, and an age range. That is the entire list, and it is the entire list on purpose (see section 3).
From a business: the business name, category, address, a contact name and email, the shop timezone, and the deals you write and the redemptions counted against them.
Automatically: standard web-server records, and error reports when something breaks. We do not run advertising trackers, we do not sell data, and there is no third-party analytics script on this site.
Who else sees it
Four companies process data on our behalf, and no others. Clerk handles sign-in, so it holds your email address and your sign-in history — there are no passwords on this site to lose. Stripe handles every payment and every payout, so it holds your card or bank details; we never see or store a card number, and a family’s bank account and tax ID are given to Stripe directly, never to us. Postmark sends our email. Sentry receives error reports when a page breaks.
Our database is hosted by Supabase, in the United States.
We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not hand it to anyone else except where the law requires it or where it is necessary to protect a child.
Children
Kids never sign in. There are no kid accounts, no kid passwords, and no way for a kid to create anything on this site. Every account belongs to an adult.
A public family page shows a kid’s first name and their activity, and nothing else — no last name, no school, no team, no club, no organization, no address, and never a future event, time or place. The age range a parent gives at signup is used only to understand who Superfan Deals serves; it is never shown on any page and never leaves our own systems.
There is no way to send a message to a kid through Superfan Deals. Season updates travel one way — a parent writes them, an automated safety check screens them, the parent approves them, and only then do approved followers receive them. There are no replies, no comments, and no reactions.
Following a kid’s updates requires both an active membership and the parent’s approval. A parent can decline or revoke a follower at any time, and we never tell the person that they were declined.
A parent can have everything about their family and their kids deleted by emailing us. We will do it, and we will confirm when it is done.
Your choices
You can see and change your own details from your account. You can cancel a membership at any time from Account, and cancelling stops future charges.
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@directily.com and a person will handle it. Some records we must keep — a payment we processed, a payout we made, and the ledger rows behind them are financial records, and deleting an account does not erase them.
If you are in a state with its own privacy statute, you have the rights that statute gives you and the same email address is how you use them. We will not treat you differently for asking.
How long we keep things
Account and family records last as long as the account does. Financial records — payments, payouts, ledger rows, tax documents — are kept for as long as tax and accounting law requires, which is longer.
Error reports are kept for a short period and then discarded. Web-server records are kept only as long as they are useful for keeping the site running and secure.
Security, and being honest about it
Card numbers and bank details never touch our servers — Stripe holds them. There are no passwords on this site, so there is no password database to breach. Access to the production database is limited to the people who run Superfan Deals.
No system is perfect and we are not going to claim ours is. If something happens that affects you, we will tell you what happened, when, and what to do — plainly, and quickly.
Changes to this policy
When this policy changes in substance, the version date at the top moves and the change is described here. We will not quietly rewrite what you already agreed to.
Questions about any of this? Email hello@directily.com — a person reads it, usually the same day.
Also here: Membership terms · Family terms · Business terms · Organization terms