privacy policy

This policy explains what YES! Inc. ("we", "us") collects when you visit yes.land, dress GoodGood in the photo booth, get a PalPass, or sign up for letters from DeeDee, and what we do with it. Information below should be read by a parent or guardian.

1. the short version

• The photo booth runs in your browser. What your family makes there stays on your device until a grown-up fills in the PalPass form.
• The PalPass form is for grown-ups only. You must be 18 or older to fill it in.
• We ask for a family name, a town, an email address, and, if you like, a short note and a US phone number. That's it. We never ask for a street address.
• The only thing other visitors can see from your PalPass is the unnamed pin every PalPass adds to the globe on our home page: near your town, with our own drawing of GoodGood in the pose you picked. Never your name, and never a picture your family made.
• We don't sell your information, and we don't use it for advertising.
• We keep your PalPass for as long as your family keeps it. You can stop our emails and texts at any time, and you can delete your PalPass yourself whenever you like.

2. who we are

YES! Inc., 2050 15th St. Suite 206, Detroit, MI 48216. Email: hello@yes.land.

"Services" means yes.land, the photo booth, the PalPass, our letters and texts, and meeting GoodGood in person.

We run yes.land from the United States.

3. what we collect, and why

In the photo booth. The outfits you pick for GoodGood (colors, patches, pose, face, frame and background), the polaroid pictures the booth makes of them, and the family name typed on the booth. These are kept in your browser's own storage on your device. They are not sent to us until a grown-up submits the PalPass form. The pictures are drawings of GoodGood in your outfits. The booth only captures its own drawing on the yes.land page. It does not use your camera and cannot view any other part of your screen.

When a grown-up makes a PalPass, we store:

• Family name — to put on your pass and so GoodGood can greet you.
• Town — chosen by you from a list. To help you choose, we suggest a nearby town from your internet connection's rough location (your IP address), the way a weather site does. We don't ask for your device's precise location, and we don't keep the suggestion unless you pick it. We use your town to know where families are waiting for GoodGood, to place your pin on the globe, and to tell you when GoodGood or the pigeon is near.
• A short note (optional) — "anything GoodGood should know about your family?" Up to 280 characters. Please keep it light: no addresses, phone numbers, health details, or anything you wouldn't say to a friendly stranger.
• Email address — to send your pass, sign-in links, and letters from DeeDee.
• Phone number (optional, US only) — only if you add it, and we text you only if you also tick the box to receive texts (see section 7).
• Your outfits and their pictures — the polaroid (which shows your family name) and a small head-and-shoulders picture of GoodGood in your outfit (which does not).
• Your agreement — that you are the grown-up and accept our terms and this policy, and when you agreed.
• Pass details we create — a pass number, a three-word code (like "chili pepper sundae"), a tap id for the QR code, and the date you became pals.

When you meet GoodGood, our staff may add a stamp to your pass: where and when you met, and sometimes a short note written by our staff. We also keep a record each time our staff look up a pass at a meet: when, which of our devices, and whether a pass was found. Our team may also film and photograph meets, and share what we film on our website and social media. If you'd rather you or your child stayed off camera, or want a face blurred, tell our staff at the meet, or email hello@yes.land to ask us to take something down.

If you only sign up for letters from DeeDee, we keep just your email address.

When you look for GoodGood's ship. If this browser has no PalPass and you haven't picked a town, the home page and yes.land/sky ask our server for a town near the general area of your internet connection (your IP address), so they can show when the ship passes over you. We never ask for your device's precise location, and we don't store that town. A town you pick yourself is kept only in your browser.

When you visit the site. Like most websites, our hosting provider receives technical information with each visit, such as your IP address, browser type, and the pages you open, and keeps it in standard server logs for a limited time. We use it only to run the site, keep it safe, and stop abuse. We also count visits with privacy-friendly statistics that use no cookies (see section 12).

4. what we use it for

• To make your PalPass, show it to you, and let you edit it.
• So GoodGood and our staff can recognize your pass when you meet him, and add your stamp.
• To send you emails: your pass, sign-in links you ask for, and letters from DeeDee about GoodGood, the pigeon, and when he's coming near your town.
• To send you texts, only if you opted in to them, once we start sending texts.
• To decide where GoodGood should visit, based on how many families are waiting in each town.
• To share clips and photos from meets on our website and social media.
• To keep the site safe and working, and to stop abuse.

We don't sell your information. We don't share it for advertising. We don't use it to build profiles of children.

5. what's public: the globe

Every PalPass adds an unnamed pin to the globe on our home page. The pin sits near the town you gave us (its spot is rounded, so it never points to your home) and shows our own drawing of GoodGood in the pose you picked, never a picture your family made. It never shows your family name, your note, your email, your phone, or your code.

The pin comes with the PalPass: there's no way to make a PalPass without one. If you delete your PalPass, its pin goes too.

In a browser that's signed in to your PalPass, your own pin is marked "that's you" and shows your own small picture of GoodGood (still without your name), and nobody else sees that mark or that picture.

Some pins on the globe are examples we set up ourselves, with pre-set family names and pictures. They are not real families, and no real family's name is ever shown.

The QR code on your pass links to a page that says what a PalPass is. That page shows nothing about your family.

6. who can see your family's details

• You. In the browser you used to make the pass, or from a sign-in link we email you.
• YES! Inc. staff running a meet. Through a private staff tool that only works with our secret key, when your pass is tapped or scanned, or your three-word code is entered. It shows your family name, town, note, pass number and code, your GoodGood designs and their pictures, and your stamps. It does not show your email or phone.
• A small number of YES! Inc. team members who run the site, when needed to operate it, answer your requests, or keep it safe.
• Our service providers, who store or deliver information for us and may use it only to provide their service:
  • Vercel — hosting, file storage for the pictures, visitor statistics, and the rough location used to suggest a town.
  • Neon — our database (provided through Vercel).
  • Resend — sending email.
  • Twilio — sending text messages, once we start. We don't send texts yet.
• Two other companies' files. DeeDee's letters ask your mail app for their typeface from Google Fonts, so a mail app that loads it shows Google your IP address, but nothing about your family. The kidSAFE seal on yes.land/safety is a script from kidsafe.com, which sees your IP address and browser and keeps a small value in your browser's session storage until you close the tab.
• The law. If we are required to by law, or need to protect someone's safety.
• If YES! Inc. changes hands. If YES! Inc. is ever merged or sold, your family's details would move with it, under the same promises as this policy.

Your information is stored in the United States.

7. emails and texts

You can stop letters from DeeDee at any time with the unsubscribe link at the bottom of every letter. You'll still get emails you ask for, like a sign-in link.

Texts are only for families who add a US phone number and tick "text me when GoodGood is near". We don't send texts yet. When we start, YES! Inc. will send them through Twilio: a few texts a year, when GoodGood is visiting somewhere near you. Message and data rates may apply. Reply STOP to stop them at any time, or HELP for help. You can also remove your number on your PalPass page. Agreeing to texts is never required to get a PalPass, and we never share your phone number or your agreement to receive texts with anyone for their own marketing.

8. children and parents

The photo booth is made for kids and grown-ups to play together. The PalPass form is for the grown-up, who must be 18 or older and a parent or guardian of the children in the family. Children are not asked for and should not submit personal information. The family name a child might type in the booth stays in the browser until a grown-up reviews it and submits the form.

If you believe a child has sent us personal information without a parent, email hello@yes.land and we will delete it.

YES! Inc. is Listed by the kidSAFE Seal Program.

9. how long we keep it

We keep your PalPass and its details for as long as your family keeps it. You can delete it yourself at any time from your PalPass page (see section 10), or write to hello@yes.land and we will delete it for you.

• When a PalPass is deleted, its pictures, its stamps and its pin go with it. Records of staff look-ups and of letters we sent stay, but they no longer say which family they were for.
• If you only signed up for letters, we keep your email address until you ask us to delete it.
• If you unsubscribe, we keep your email address only to make sure we don't write again.

10. your choices and rights

• See and edit your pass at any time on your PalPass page. To change the email on it, write to us.
• Delete your PalPass yourself at any time: "delete this PalPass" at the foot of your PalPass page removes your pass, its pictures and its stamps right away, its pin leaves the globe within a few minutes, and your browser forgets its copy too.
• Forget it on one device: "forget this pass on this device" signs that browser out and clears its saved copy. Your PalPass stays.
• See, correct, or delete what we hold about your family, or get a copy of it: email hello@yes.land from the address on your pass, and we'll take care of it.
• Stop emails or texts: see section 7.

11. keeping it safe

We use encrypted connections, keep the pictures in private storage that only our own site can read, sign family sessions so they can't be forged, and lock the staff tool behind a secret key. No system is perfect, so we also try to collect as little as we can. If something goes wrong that affects your information, we'll let you know, following state and federal legal requirements.

12. cookies and storage on your device

Cookies. yes.land sets two small cookies of its own, and only after a grown-up makes a PalPass or taps the button in one of DeeDee's letters:

• gg_palpass keeps this browser signed in to your PalPass. It holds a signed code for your pass and nothing else.
• gg_has_pass only tells our pages that this browser is signed in, so the profile button can show. It holds the number 1, nothing about you.

Both last one year from that sign-in, or until you delete your PalPass or choose "forget this pass on this device".

Storage on your device. So the booth and your pass load quickly, your browser keeps:

• your booth outfits, the family name typed on the booth, and the booth's pictures;
• once you have one, a copy of your PalPass, with the details you gave us;
• a town you picked on the sky page, and which of the ship's messages you've opened;
• for the current visit only, small notes such as a notice you closed.

These stay on your device until you clear them in your browser settings. Deleting your PalPass, or "forget this pass on this device", clears the copy of your pass and the booth's pictures. On a shared computer, choose "forget this pass on this device" when you're done.

No tracking. We don't use advertising or tracking cookies, we don't sell or share anything for advertising, and we don't follow you across other websites. Our visitor statistics (Vercel Web Analytics) use no cookies. They count visits and record the page (without any sign-in or unsubscribe codes in its address), the site you came from, your rough location, and your type of device and browser. Because nothing here tracks you, there's nothing for your browser's "Do Not Track" setting to switch off.

Other companies. The kidSAFE seal and Google Fonts are described in section 6. If we ever show a video from YouTube on yes.land, nothing loads from YouTube until you tap to play it. Then YouTube (Google) receives your IP address and browser details and may set its own cookies, under its own privacy policy.

13. changes to this policy

If we change this policy, we'll post the new version here with a new date. If the change is important, we'll email PalPass families before it takes effect.

14. contact

Questions or requests: hello@yes.land, or YES! Inc., 2050 15th St. Suite 206, Detroit, MI 48216. Questions about an old With Love account are welcome at the same address.