Privacy

There are no accounts, and the site collects nothing that identifies you or your child.

NYC School Tours is run by Untitled Repo LLC (“we”). This page says what the site keeps about you; the Terms of use say what it promises.

What we count

To learn which schools families look at and whether the site helps, we count, anonymously:

• pages viewed;
• clicks through to an event's sign-up (the school's, or an RSVP on MySchools), or to its listing on MySchools;
• subscribing to a calendar feed, and from which app;
• saving a school to your shortlist, sharing a shortlist, starting to keep one in sync, and what's chosen when a shared list or a sync link is opened: how many schools, never which;
• filters used, such as a borough or “Band”, and how many results they gave. We never send what you type into the school-name search, only that a search was used.

The counting is done by PostHog, an analytics service, set up so that:

• it sets no cookies and stores nothing in your browser;
• your IP address isn't kept. To tell one visitor from the next without cookies, PostHog turns your IP address and browser type into a scrambled code, using a secret that changes every day. The IP address is then discarded, and the code can't be traced back to you or matched across days;
• there are no profiles of individual people, no session recordings or heatmaps, and no tracking across other websites;
• where you came from is kept only as a site and page, such as google.com/search, never your search terms.

There is no advertising, and nothing is sold or shared.

When something breaks

If a page hits an error, it sends PostHog an error report, so we can find what broke and fix it. A report holds:

• the error's message, and where in the site's code it happened;
• the page's address, without its private parts: what you typed into the school-name search, a shortlist link's schools, and a synced list's keys;
• your browser and device type, such as Safari on an iPhone.

It doesn't hold your IP address, cookies, or anything you typed into a form, and like the counting it isn't linked to you. A page sends at most five reports. Errors on our server are reported the same way: the address that failed and where in the code, and nothing else about the request.

Reporting a problem or adding a tour

When you report a problem or add a tour, we keep what you choose and type, and nothing else: not your name, email or IP address. Please leave names and contact details out of what you type. A tour you add shows on the site only after a person checks it, credited to “a reader” and linked to where it was posted.

Your shortlist

Schools you save are kept in this browser, not in an account, unless you choose to keep the list in sync (below). To show their tours, the page asks our server about those schools by their codes; nothing is kept beyond the hosting logs below. A link to your list carries the schools in its address, so anyone with the link can see them and pass it on. Opening a link changes nothing until that person chooses to add the schools. Clearing your browser's site data clears the list, and Safari can clear it if you haven't visited for a week or so; a link you've sent yourself brings it back.

A shortlist kept in sync

If you choose “Keep this list in sync” on the shortlist page, we keep a copy of the list on our server, so it stays the same on your phone, your computer and a co-parent's, and a calendar subscribed to it follows its changes. Only this is kept with it:

• the codes of the schools on the list, such as 13K313;
• two random keys: one that reads the list, which its calendar feed uses, and one that changes or deletes it, which we keep only scrambled (as a hash), never the key itself;
• a version number, so two devices changing the list at once don't undo each other;
• two dates, each a day and not a time: when it was last opened on the site, and when a calendar app last read it.

Nothing kept with it says who you are: no name, email address, IP address, or browser or device type. Each device keeps its own copy in its browser too, which works offline.

The key that changes the list travels in your sync link after its “#”, a part of a web address that browsers never send to a website, so it isn't in any log. Anyone with the sync link can change your list, so send it only to your own devices or someone you're choosing schools with; to show someone the list without that, use the ordinary share link. The key that reads the list is in the address of the calendar feed and of the requests that read it, which the hosting logs below see like any address. To limit abuse, our server counts each visitor's requests to synced lists for up to ten minutes, in its memory only, under a scrambled code of the IP address that can't be turned back into it; nothing of it is written down.

How long it's kept: a synced list is deleted a year (365 days) after it was last opened on the site or last read by a calendar app, whichever came later, so one started in 4th grade is still there for the 5th-grade search. Opening the site on a device that syncs the list counts as opening it, and so does changing it. A calendar app subscribed to the list keeps re-reading it on its own, even when you've hidden that calendar, so a subscription alone can't keep a list forever: it's deleted at most two years (730 days) after it was last opened on the site, even while a calendar still subscribes, and that calendar empties.

Deleting it: on the shortlist page of any device that syncs it, “Delete the synced list” removes it from our server at once, and a calendar subscribed to it empties. The schools stay saved in each device's browser. “Stop syncing” forgets the keys on that device only, and the list stays on our server for the others. Each change replaces the copy we keep. Our database provider keeps six hours of history so the database can be restored after a mistake, so a deleted list, or the copy a change replaced, is fully gone six hours later.

Calendar subscriptions

If you add tours to Google, Apple or Outlook Calendar, your calendar service fetches the feed from us a few times a day. The feed's address lists only the filters or schools you chose, or, for a synced shortlist, the key that reads it, and we keep nothing about who fetches it beyond the hosting logs below and, for a synced list, the day a calendar app last read it.

The map

The map's images come from OpenFreeMap, a free map service. When you open the map, your browser fetches them from OpenFreeMap's servers, which see your IP address as any website would. No other page loads anything from them.

Buy me a coffee

The “Buy me a coffee” link opens Buy Me a Coffee, a tipping service, in a new tab. It's only a link: no page here loads anything from Buy Me a Coffee, and we don't count who clicks it. If you choose to give, you pay on their site, under their privacy policy. They may show the parent who runs this site the name, email address or message you give them there, and none of it is linked to how you used this site.

Hosting

Our host, Vercel, keeps standard server logs, such as IP addresses and browser types, for a short time to run and protect the site.

What we never collect

Names, email addresses, phone numbers, home addresses, or anything about your child: their name, grade or current school. If you give through Buy Me a Coffee, what they pass on is described above.

Changes

If the site ever asks for anything more, such as an email address for tour alerts, this page will say what's kept, for how long, and how to delete it, before that feature goes live. Questions? Use Report a problem.

Last updated October 7, 2026.