Information we collect
Depending on how you use the site, we may collect:
-
Account information: if you create an account, for example your email address and the profile details you provide. Authentication is managed by our identity provider (Supabase Auth).
-
Community content: questions, answers, and comments you post on the site are public. They are shown with the display name on your account, and other visitors can read them.
-
Anonymous posts: you can post a question without an account. When you do, we collect your IP address and basic browser details to enforce rate limits and prevent abuse. Anonymous posts are also checked by Cloudflare Turnstile, a spam and abuse protection service that processes browser and device signals.
-
Usage data: such as pages viewed, approximate region from IP address, device and browser type, and interactions with search or navigation features.
-
Content you submit: for example, text you enter into forms, business listing submissions, support messages, or other fields where you voluntarily send us information.
-
Business information: if you submit a business listing, or claim and manage one, the business details on the listing (name, address, phone number, website, photos, and similar details) are public. Updates you post for your business are public as well.
-
Listing contact: if you add a name and email on a listing form, we include those on the intake email to our team and do not save them on the listing or in the review queue. Account email stays with our identity provider (Supabase Auth) if you sign in.
Cookies and similar technologies
We use cookies and similar technologies that are necessary for the site to function, for example session and security cookies.
Where enabled, we use product analytics (PostHog) to understand usage and improve the product. PostHog also powers feature flags, which let us turn features on or off, and session recording, which can record how visitors interact with pages (such as pages viewed, clicks, and scrolling) so we can fix bugs and improve the experience.
Some forms are protected by Cloudflare Turnstile, which uses browser and device signals to tell people apart from bots.
You can control cookies through your browser settings; disabling some cookies may limit certain features.
How we use information
- To operate, maintain, and secure the website and accounts.
- To publish and moderate community content, and to prevent spam and abuse.
- To personalize or improve search and discovery experiences.
- To measure performance, fix bugs, and develop new features.
- To communicate with you about the service or respond to inquiries.
- To comply with law and protect our rights and users.
Some answers and content on the site are drafted with the help of AI tools and reviewed by people before or after posting. When you submit a question, it may be processed by AI tools to help draft an answer.
Sharing
We use trusted service providers who process data on our behalf under agreements that limit use to providing the service. These include hosting (Vercel), database and authentication (Supabase), analytics (PostHog), and spam protection (Cloudflare). We may disclose information if required by law or to protect the safety and integrity of WhereTo30A and our users.
We do not sell your personal information as that term is commonly understood under U.S. state privacy laws.
Retention
We keep information only as long as needed for the purposes above, unless a longer period is required by law. Technical logs, including IP addresses collected for rate limiting and abuse prevention, may be retained for a limited time for security and troubleshooting.
Your choices
- Access or update certain account details through your profile where available.
- Delete your account at any time from your account settings, or by contacting us. When an account is deleted, the account and everything posted from it (questions, answers, and comments) are removed from the site. We will complete verifiable requests as required by law.
- Opt out of non-essential cookies where our tooling provides that option, in addition to browser controls.
Children
WhereTo30A is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps.
Changes
We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date above.
Contact
Privacy questions: hello@whereto30a.com