Privacy Policy

Who we are

Santa's Toy Run is a charity toy drive and race weekend at Michelin Raceway Road Atlanta, run by Circle Heart Racing LLC. "We" on this page means both. This policy covers www.santastoyrun.org. If you have a question about it, Ron will answer it.

What we collect

What you send us

Each form asks only for what it needs:

• Contact: your name, phone, email, topic and message.
• Volunteer sign-up: your name, email, mobile number, group details if you have them, the days and jobs you can help with, whether you are under 18, any notes, and your OK to be emailed or texted about volunteering.
• Donation: your name, email, recipient and amount, plus your phone and mailing address if you give them.
• Hot lap ride-along: your name, email, recipient and number of rides, plus your phone if you give it.
• Raffle: your name, email and number of tickets.
• Car show: your name, email, vehicle and number of vehicles, plus your phone, car club, guest's name and notes if you give them.

With every entry we also save the time, your IP address and your browser type, which help us spot spam and fraud.

If you pay

Donations, raffle tickets, ride-alongs and car show entries are paid at PayPal. We send PayPal the item, the amount, any charity you chose and a reference number. PayPal shows us your name, your email and the amount, as it does for any payment, and sends you the receipt. We never see your card or bank details. If you pay cash at the event, we write down your name and any contact details you give us.

If you use the shop

The shop's pages are ours, but the product photos, the prices and your cart come straight from Fourthwall, the company that prints and ships the merch, so your browser talks to Fourthwall directly. Checkout is different again: see The shop's checkout.

If you send a gift from a wish list

Gifts from our Amazon wish lists are bought and shipped by Amazon, under Amazon's privacy notice. We see the gift and any name or note you add to it.

What is collected automatically

Cloudflare hosts this site. Like any host, it sees your IP address, your browser and the pages you ask for, and uses them to deliver the site and protect it. Its Web Analytics also counts page views and load times. That count sets no cookies and is part of our hosting, so it keeps running whatever you choose in Privacy Preferences. See Cloudflare's privacy policy.

Cookies and tracking

Google Analytics

Google Analytics tells us how many people visit, which pages they read, how they found us, roughly where they are and what kind of device they use. That is how we learn which pages help the toy drive. It sets two cookies on santastoyrun.org, _ga and _ga_T670Q4SDDW, which last up to two years.

Google does not keep your IP address. It keeps event details for 2 months and visitor-level details for 14 months, and our reports show totals, not names. We have Google signals and ad personalization switched off and no advertising account linked, so this measurement is not used to build advertising profiles. See Google's privacy policy.

Your choices

Google Analytics runs unless you turn it off. The first time you visit, a small note says so. You can turn it off whenever you like with Privacy Preferences, at the bottom of every page or right here:

Open Privacy Preferences

Turning it off stops Analytics straight away, clears its cookies from this site and stays off in this browser.

If your device is set to a European time zone, which we use as a stand-in for being in the EU, the UK or Switzerland, or to a time zone that says nothing about where you are, Analytics stays off unless you say yes.

If your browser sends a Global Privacy Control signal, we treat it as a request to turn Analytics off, and the note tells you so. You can still turn it on yourself. We do not respond to Do Not Track signals, which never became a working standard.

Your choice is saved in your browser and is never sent to us. If you clear your browser's storage, or use another browser or device, we will not remember it. If you leave Analytics on, the note comes back after a year. Google also offers a browser add-on that turns Analytics off on every site.

What else your browser keeps for this site

These stay on, because the site needs them. They do not follow you anywhere, and nothing is stored until you use the feature they belong to.

• str_privacy_v1 (local storage): remembers your Privacy Preferences until you clear it.
• fw_cart_id and fw_cart_names (local storage): keep your shop cart until you check out or clear it.
• str-channel (session storage): at the track, tags a raffle sale with where it was made, until the tab closes.

The spam check on our forms

Our forms use Cloudflare Turnstile to keep bots out. It starts when you first touch a form, checks your browser and IP address, and sets no cookies on this site. See Cloudflare's Turnstile notice.

The shop's checkout

When you press Checkout in the cart, you leave our pages for checkout.santastoyrun.org. It carries our name, but Fourthwall runs it. Fourthwall collects your contact details, shipping address and payment there, with Stripe and PayPal handling the card or account.

Fourthwall runs its own tools on those pages, and they are not ours to switch off. In November 2026 they included Google Analytics, Google Ads and Meta's pixel, which measure and support advertising, along with reCAPTCHA and hCaptcha against fraud and Sentry for error reports. Some of their cookies land on santastoyrun.org, so you may find them next to ours. Privacy Preferences does not reach these tools. If you have turned Analytics off, this site clears the ones it can reach when you come back. See Fourthwall's privacy policy, Stripe's and PayPal's.

Maps and video

The map on our Drop-Off Locations page is drawn from OpenStreetMap, so your browser asks OpenStreetMap for the map images and it sees your IP address, under its privacy policy. The videos on Past Results are pictures until you press play. Then they load from YouTube's privacy-enhanced service, under Google's privacy policy.

How we use your information

To answer you, run the event, handle entries and tickets, draw the raffle, send donations to the charities you pick, reach volunteers, keep our books, stop spam and fraud, and see which pages help. We do not use what you send us for advertising. If we write to you and you would rather we did not, tell us and we will stop.

Who sees it

Every entry is emailed to Ron and to our volunteer webmaster, and kept in a private database behind a login. These companies handle it for us:

• Cloudflare hosts the site and the database, delivers the form emails, runs the spam check and counts page views.
• Google runs Google Analytics. Google and Microsoft run the mailboxes the entries go to.
• PayPal takes payments. Fourthwall and Stripe run the shop's orders and payments. Amazon runs the wish lists.

If you choose a recipient charity, we may tell that charity who the gift came from. We may also share information if the law requires it, to protect people or the event, or with whoever takes over the toy run if it ever changes hands.

We do not sell your personal information, and we do not share it for advertising. What Fourthwall does on its own checkout pages is covered above.

How long we keep it

• Form entries, payment records and the emails about them: as long as they help us run the event and keep our books. There is no fixed end date. Ask us to delete yours and we will, unless we need to keep a record of a payment.
• Google Analytics: 2 months for event details and 14 months for visitor-level details. Its cookies last up to two years, or until you turn it off.
• Cloudflare's logs: a short time, to keep the site working and secure.

Keeping it safe

The site runs over HTTPS, our list of entries sits behind a login and card details never reach us. No website is perfectly secure, so please do not send us anything through a form that you would not put in an email.

Your rights

You can ask what we hold about you, ask for a copy, and ask us to correct or delete it. Some states give you these rights by law. We offer them to everyone. Email or call Ron and say "privacy request". We may check it is really you by matching details we already hold, and we will answer within 45 days. If you think we got it wrong, ask us to look again. You will not be treated any differently for asking.

We can only act on what we hold. For what PayPal, Fourthwall, Stripe, Amazon or Google hold, use the links above.

Children

This site is written for adults, and we do not knowingly collect information from children under 13. Volunteers under 18 are welcome with a waiver signed by a parent or guardian, which is why the volunteer form asks. If you think a child under 13 has sent us something, tell us and we will delete it. This site never asks about the children who receive the toys.

If you are outside the United States

We run this site from the United States, and what you send us is handled there. If you are in the EU, the UK or Switzerland, we rely on your consent for Google Analytics, on doing what you asked when you fill in a form or pay, and on our legitimate interest in running the event and keeping our records. You have the rights above, and you can complain to your local data protection authority.

Other sites

We link to sponsors, recipient charities, Facebook and Google Maps. Their own privacy policies apply once you are there.

Changes to this policy

If what this site does changes, we will update this page and the date at the top. If we add a tracking tool, it will be listed here and in Privacy Preferences before it runs, and it will stay off for anyone who has turned Analytics off.

Contact us

Ron Rigdon, Santa's Toy Run (Circle Heart Racing LLC)
Ron@SantasToyRun.org
404-925-7350