Who runs this
Program Hub is operated by the YMCA of Greater Toledo, 811 Madison Avenue, Toledo, Ohio 43604-5684, as a library of program resources for its own staff and the staff of YMCA Storer Camps.
Questions, corrections, or a request to see or remove what we hold about you: sflack@ymcatoledo.org.
You can only be here if someone invited you
There is no sign-up form. Accounts exist because a director at your YMCA sent an invitation to your work email address. That means we did not collect your details from anywhere — they arrived with the invitation, or from the account you chose to sign in with.
What we hold about you
| What | Why we have it |
|---|---|
| Your email address and name | To let you in, to show colleagues who added an activity, and to send you the emails described below. |
| Which YMCA you belong to, and your role | Your YMCA's director manages their own people. Your role decides what you can do — read, contribute, or administer. |
| Your Google account identifier | So the right account is matched when you return, even if your name or email address changes later. |
| The activities and files you upload, and what you save to Favorites | They are the library. Anything you publish is visible to everyone who can sign in. |
We hold no password. Sign-in is your YMCA Google account and nothing else, so there is no password here to lose, and no lockout counter to keep.
Invitation links are never stored as they appear in your email. We keep only a one-way hash, so a copy of the database cannot be used to claim an invitation. Invitations expire after 14 days and can be used once.
⚠️ Please do not upload information about children or families
This is a library of curriculum and program material — lesson plans, printables, supply lists, activity photos. It is not designed to hold, and should not be used to hold, names, records, health information, or anything else identifying the children and families your YMCA serves.
Remember that anything you publish is visible to every colleague who can sign in. If a document contains a child's name, remove it before uploading.
The assistant reads your files, and that means sending them out
When you upload files, the site offers to read them and suggest a description, supply list and other details. When you use Ask, your question is answered from the library's catalogue.
Both work by sending content to Anthropic's API — the files you uploaded in the first case, and your question plus the list of activity titles and descriptions in the second. This is the one place where material you put into the site leaves our servers, which is why it has its own section rather than a line in a list.
- Anthropic's commercial API terms state that content sent through the API is not used to train their models.
- Nothing is sent unless you upload files or ask a question. Browsing, searching and downloading involve no third party at all.
- You can turn the reading off for an upload — there is a checkbox on the form — and fill the details in by hand.
Cookies, and what we deliberately don't do
One cookie, to keep you signed in. It is marked HttpOnly and Secure, is not readable by scripts, is not sent to other sites, and lasts 30 days or until you sign out.
We do no analytics and no advertising. No Google Analytics, no tag manager, no pixels, no session recording. Nothing we run is measuring you, and the site's security policy would block it if we tried.
There is one exception, and it is YouTube. See below.
YouTube videos. Some activities have a YouTube video attached — a
read-aloud that goes with the lesson, say. The video player is part of the page, so
opening an activity that has one loads the player from YouTube, whether or not you
press play. From that point YouTube can see that the page was opened, along with
the usual things any website sees: your address and your browser. That is Google's data,
under Google's privacy policy, not ours.
We use YouTube's privacy-enhanced address (youtube-nocookie.com), and the
player only ever loads on an activity that actually has a video — every other page on this
site reaches no third party at all. Nothing starts playing by itself.
Our web server keeps ordinary logs — the address you connected from, the page requested, and when. Those are operational records used to diagnose faults and detect abuse.
Activities and collections count how many times they have been opened, and how many people have saved them. Those are counts of the thing, not of you: no record is kept of who opened what. Opening the same activity twice in a visit counts once, and that is remembered in your own browser session rather than written down here. The numbers exist so we can tell which material is actually being used.
Where it lives, and who else is involved
- Hosting — the site and your uploaded files sit on a server we rent from DigitalOcean, in the United States.
- Sign-in — Google authenticates you and tells us your email address, your name, and an identifier. Your password is never given to us and we never see it.
- Email — invitations are sent from
noreply@ymcatoledo.orgthrough the YMCA of Greater Toledo's own mail server. - The assistant — Anthropic, as described above.
We do not sell your information, and we do not share it for advertising. There is nobody else in the picture.
How long we keep things, and how to have them removed
- Your account lasts until your YMCA's director deactivates it — normally when you leave.
- Activities and files last until someone with permission deletes them. Deleting an activity deletes its files.
- Unaccepted invitations expire after 14 days; reset links after 2 hours.
- The site is backed up as a matter of routine, so a copy of deleted material can persist in those backups for a period after it disappears from the site.
Email sflack@ymcatoledo.org to ask what we hold about you, to have it corrected, or to have your account and what you contributed removed. Say what you want and we will tell you what we did.
Changes
If this statement changes in a way that affects what happens to your information, the date at the bottom of this page changes with it. The site's changelog records every release, so a change here is traceable to the version it shipped in.
Last updated 18 August 2026. If anything here is unclear, or you want to know what we hold about you, email sflack@ymcatoledo.org.