Privacy

What stays only in your browser

The student profile (academic group and DIA eligibility from MySchools, borough, zip, interests, lottery number, practice SHSAT score), favorite schools, your application list and comparison settings are saved in your browser’s local storage (localStorage) on this device. They are not sent to our server.

A home address is optional. If you type one, the text goes to NYC GeoSearch, the city’s geocoder, to suggest matches; the address and coordinates you pick are stored only in your browser.

We do not ask for your child’s name, date of birth, current school or your family income.

To erase this data, clear site data for schoolmatch.nyc in your browser settings.

What our server stores if you sign in

• Your email address and the date the account was created.
• Google sign-in: Google sends us your verified email address; we take nothing else from your Google account.
• Email link sign-in: your email and a hashed code of the one-time link, which expires after 30 minutes.
• A sign-in cookie, sm_session — secure, not readable by scripts, valid for 90 days. “Sign out” deletes it.
• If you turn on reminders: the codes of the schools you follow and a record of reminders already sent, so we never send the same one twice.
• Everything is free right now. If paid plans return, payment happens on Square’s side: your card number never reaches us; we keep only the plan, its expiry date and the Square order number.

Who else sees data

We do not sell or rent data and do not share it with advertisers or data brokers. The site has no visitor analytics, ad pixels or trackers. Like any web server, ours receives your IP address and basic request details in order to serve the page.

• Resend — the service we use to send sign-in links and reminders (it receives your email address and the message).
• Google — when you sign in with Google or open a Google map; your browser then talks to Google directly.
• OpenStreetMap and unpkg.com — the backup map (Leaflet) if Google Maps is unavailable.
• NYC GeoSearch — the address text, if you type one.
• School ratings and photos from Google Places and static maps are fetched by our server: Google sees our server, not you.

Deleting your account

There is no delete button yet. Write to us from the email linked to your account and we will delete your email, reminder subscriptions and reminder log.

You can turn reminders off yourself: uncheck “Email me reminders” for the school in the calendar.

Contact

Changes

If we start collecting anything new, we will update this page and the date below.