Privacy notice
Updated October 17, 2026 · Google sign-in and member reviews are available.
Toy Confidential compares adult products, retailer prices and reviews. The owner is based in Michigan, United States, and owns toyconfidential.com. The intended launch audience is adults in the United States; this does not mean access from other countries is automatically blocked. This notice describes the browsing-first website and retained review records. Toy Confidential is operated by an individual based in Michigan, using Toy Confidential as the public brand; no separate company has been formed. Any required legal identification remains to be finalized with appropriate review. The review and retention rules are explained below.
Browsing and review availability
Anyone may browse the catalog without an account. Free Google sign-in is available. Google supplies your verified email address, account identifier and basic profile information to Supabase, our account service. We use these to authenticate you and maintain your account. Your Google name and photo are not automatically published. A review requires sign-in. We store its association with your account so you can view its status and withdraw it. A review contains your rating, optional title, text, chosen nickname and product or site target. Approved fields may be public; your account email and Google profile are not published automatically. Email sign-in is not yet available.
Earlier reviews
Before this browsing-first release, the review form accepted a rating, optional title, review text and public nickname without requiring membership. It also recorded product or site identity, department and a local return page. Those records, if retained, remain governed by the moderation and retention rules below. Choosing Anonymous did not make a submission technically untraceable, and older reviews are not automatically claimed by a new account.
Moderation and possible publication
New reviews enter a private pending queue. Submitting does not publish a review automatically. Authorized moderators consider relevant positive and negative feedback under the same rules. The publication system limits displayed content to approved review fields, dates and edit/redaction indicators; internal notes and moderation records are excluded. The owner authorized publication controls on October 11, 2026. Approval makes those fields available through the site's public review feed, independently of whether membership is available. Practice submissions are not customer testimonials.
Our Reviews are separate from retailer ratings. Feedback may relate to the whole site or a specific product. Product reviews can appear wherever that same product identity is displayed.
If publication is enabled and a review is approved, its nickname, rating, title, text and publication/edit information can be seen by other visitors alongside the relevant product or site. A nickname can identify you even without an email address. Public reviews may be copied, indexed or preserved by others; removing a review here cannot retrieve those independent copies. Pending, rejected and withdrawn submissions are not part of the public review feed.
How information is used and who may receive it
Review information is used to receive and associate feedback, moderate it, handle corrections or withdrawal requests, prevent duplicate or abusive submissions and, when authorized, display approved reviews. Moderation records include status changes, decision reasons, revision numbers and timestamps. They are not advertising profiles. The review form does not request payment details, a postal address, a date of birth or an identity document.
Depending on the environment, information is available to the owner and authorized moderators, and is processed by the hosting, review-database, authentication and email services needed to operate that environment. The hosted site uses Sites hosting; its review service uses Supabase; contact email uses Gmail. External media hosts and retailers receive their own requests as described below. Information may also need to be disclosed where required by applicable law or to address fraud, abuse or security incidents; this is not permission to publish private submissions indiscriminately.
AI-assisted moderation
The owner may use OpenAI tools to help read submissions, identify possible spam or personal information and prepare moderation recommendations. Selected review content and relevant metadata may therefore be processed by that service even if a review is never published. This is an owner-directed workflow, not an automatic AI submission endpoint in the website. The owner remains responsible for decisions; assistance must not fabricate experience, alter a reviewer’s rating or rewrite criticism into praise.
AI account settings, provider retention and any required processing arrangements have not been verified for public-launch review handling. There is no promise here that third-party processing is confidential, exempt from retention or excluded from model improvement under every account setting. Unnecessary identifying or sensitive details should not be shared with an assistant. Provider arrangements for AI-assisted moderation remain unresolved. New member submissions must not be passed to AI services until those arrangements are settled; the owner can moderate them directly in the private inbox.
Services and browser storage
The 18+ entry popup stores only a confirmation flag in this tab's session storage. It does not collect a birth date or identity document, and the flag is not sent to us. If browser storage is unavailable, confirmation may be requested again on the next page. Browser session restoration may retain the flag. This is self-confirmation, not age verification.
Member session credentials are stored in this browser tab’s session storage, not in our traffic counts. Browser session restoration may retain them. Sign out before sharing your device. We retain account details while your account exists. Request deletion at [email protected]; the owner verifies requests proportionately, deletes the account and withdraws linked reviews under the existing review-retention policy. Provider logs and backups have separate retention, which we have not confirmed.
The site uses hosting services and Supabase for review handling and moderator authentication. Moderator sign-in uses an email link. The current client stores a moderator access token in tab session storage; the visitor review form does not use that sign-in. Hosting and authentication providers may retain connection and security logs independently.
The hosted moderator inbox is separate from visitor pages and requires an authorized account. Signing out clears the browser’s moderator session and requests server-side revocation. Local development tools can use separate access mechanisms; their private links must not be shared as visitor or moderator invitations. Member reviews enter private moderation. A member login alone does not grant moderator access.
Externally hosted images cause requests to their providers. Clicking retailer links takes you to separate services with their own privacy and tracking practices. We do not add advertising pixels or session recordings. Provider locations, log retention and any international transfers remain to be confirmed.
Limited traffic counts
The site sends coarse events to its Supabase service after adult self-confirmation: a page view, a click toward a retailer, a click to start a review or use of search. For new counts, an existing signed-in session is checked to classify the event as member or guest. The event payload contains only the catalog/search page path, event type and a reporting-version marker. Stored daily totals include this audience bucket, not account IDs or emails. Older events stay unclassified. Authentication credentials are used only to validate the session, not saved in traffic totals. The application stores daily totals, not individual event histories. It does not add visitor IDs, analytics cookies, email addresses, IP addresses, device fingerprints, location, search terms, review text, query strings, URL fragments or referring-page addresses to those totals. Service providers still receive connection information and may retain separate logs.
These counts include private-preview and owner visits. They are not unique-visitor, purchase or conversion measurements. At most one event of each type is sent per document load. The private traffic center is restricted to authorized moderators. It shows a rolling 30-day window; older aggregate rows are removed when the next traffic or dashboard request runs, not by a background deletion timer. No historical traffic is reconstructed.
Requests for pages, images and services can disclose an IP address, browser/device information, time and requested resource to the recipient. Search terms are placed in the search URL and may remain in browser history or service logs; review links also identify the product and return page. Do not put private details in searches or shared links. Clearing local browser storage does not delete a submitted review or server records. The 18+ flag and session tokens serve access or session functions, not a marketing opt-in.
The traffic collector skips requests when the browser sends Global Privacy Control or Do Not Track set to 1. These signals do not cancel a review, delete existing records or control external providers. No separate analytics consent banner is implemented. Aggregate counts and these signal checks are not a substitute for any consent or opt-out rights required by applicable law. External sites set their own practices.
Email correspondence
If you email [email protected], your email address, message and any attachments are received through Gmail so we can consider and respond to your request. That correspondence is separate from anonymous product reviews and is not submitted for publication as a review. Google processes the email through its service. The owner has not yet selected a correspondence-retention period; the review deletion schedule below does not apply automatically to email. Do not send unnecessary sensitive information.
Abuse controls and retention
Member review intake uses request limits, duplicate detection and live-session checks. Review access requires signing in again after 24 hours. The reviewed application records aggregate counters and content fingerprints rather than adding visitor IP addresses or device fingerprints to review records. Hosting providers may keep separate connection logs. The existing review-retention cleanup schedule continues.
The approved application policy keeps reviews awaiting approval for up to 90 days, and published reviews while published until withdrawal or site closure. Rejected or withdrawn text, titles, nicknames and private notes are deleted after 30 days. When a redacted revision is approved, its retained original is replaced with the approved redacted text. Minimal moderation event history is kept for one year without copies of review text.
The owner activated application retention on October 11, 2026. Cleanup is scheduled hourly, in batches of up to 100 eligible reviews, after the periods above expire. Backlogs, outages or a paused database can delay cleanup; the private traffic center shows the latest successful cleanup and remaining eligible backlog. Expired pending reviews cannot be approved. Provider backup deletion timing and removal of residual review identifiers remain unresolved. We do not promise that deleting application content immediately erases every backup or copy.
Cleanup removes the specified content fields, but can leave identifiers, status/timestamp records and other metadata. Email, browser history, service logs, AI-provider records and backups are separate. Each needs a verified retention and deletion arrangement; a content deletion or withdrawal is not a claim that all personal information has been erased.
Security and children
The site is intended only for adults and does not invite children to submit information. If you believe a child has submitted personal information, contact us without sending further sensitive information about the child. Age self-confirmation alone does not establish that no child can access the site.
Access restrictions and moderation controls are intended to reduce exposure, but no website, email channel or local computer can be guaranteed secure. Do not submit intimate medical history, account credentials, financial information, private images or identifying details about another person. A review form is not a confidential counseling, medical or emergency service.
Requests and your information
For access, correction, deletion and review-withdrawal requests, email [email protected]. Send only the information needed to explain your request; do not send passwords, identity documents or unnecessary sensitive details. The review form is not a confidential request channel. Signed-in members can withdraw their own reviews from their account. Older reviews are not linked by nickname alone; contact us for assistance.
Depending on the law that applies, rights may include access, correction, deletion, withdrawal of consent, limits on certain uses, appeals or a complaint to a regulator. We do not require you to waive applicable rights. A request should identify the page or review and the change sought; do not send a government ID by default. We may need proportionate information to verify the request and protect someone else’s information. If authorship cannot safely be established, an edit or disclosure may not be possible on the information supplied; we must not disclose another person’s private record to resolve the uncertainty.
Required legal rights, response deadlines and available complaint or appeal routes take precedence over this description; we do not claim a jurisdiction-specific exemption. A matching nickname alone is not verification, and a generic publication checkbox is not a substitute for any legally required consent to sensitive-data processing.
Changes to this notice
The updated date records a change to this notice. Material changes will be described here and, where required, brought to affected users’ attention before new processing begins. A rebuild does not create new permission to use information. The account processing described above applies to Google sign-in.