Privacy

Family Drill stores the organizer identity, household agreement, member contact details, drill attempts, and deliberate engagement events. It does not collect credentials.

Organizer dashboards require a magic-link session. Relatives do not create accounts; an unguessable token opens each public drill reveal. Loading a reveal does not count as engagement—the relative must press the confirmation button.

Drills do not use tracking pixels, request passwords or payment details, or collect answers from relatives.