Privacy Policy

Who we are

Living in Duvall is owned and operated by BuckDT LLC. When this policy says “we,” “us,” or “the site,” that means BuckDT LLC and the people behind it.

The short version

We collect what the site needs to work and nothing more. Your information is never sold, rented, or handed to advertisers. If you want your data deleted, email us and we will take care of it.

What we collect

• Account information. When you sign up, we collect your email address. You also choose a display name and, optionally, a profile photo. Sign-in is handled by Supabase (our database and authentication provider).
• Activity on the site. We record actions you take on the site, including shoutouts, check-ins, saved businesses, Date Night spins, game scores, and the Buddy Bucks earned from those activities. Much of this is public by design: the leaderboard and shoutout wall display your name and photo.
• Submissions. When you submit events, business listings, or listing claims, we collect the information you provide on those forms, including any contact details. Submissions go to a review queue before being published.
• Photos. Images you upload are stored on Supabase and screened automatically by Google SafeSearch before they appear on the site. We keep the photos as long as your account is active or until you ask us to remove them.
• Analytics. We use Vercel Analytics to count page views and understand how people use the site. Vercel Analytics does not use cookies to track you, does not collect personal information, and does not build a profile of you across other websites.
• Volunteer matching. If you sign up for volunteer opportunities, we collect the information you provide (such as your name and availability) and share it only with the organization coordinating the volunteer effort.

How we use your data

We use the information we collect to operate the site: to display listings and events, to show shoutouts and leaderboard standings, to process submissions, to send text notifications you have opted into, and to deliver the newsletter. We also use analytics data to understand which parts of the site are useful and which need improvement.

We do not sell your data. We do not rent it. We do not share it with advertisers.

Third-party services

The site relies on a small number of third-party services. Each one sees only the data it needs to do its job:

• Supabase. Handles our database, user authentication (sign-in and sign-up), and file storage (including photos). Supabase stores your account information and the content you post.
• Vercel. Hosts the site and provides anonymous, cookie-free analytics. Vercel sees standard web traffic data (page requests, IP addresses for routing) but does not use it to identify or track individual users.
• Twilio. Sends text messages. If you claim a listing and opt in to notifications, Twilio delivers texts when your business receives a shoutout or other activity. Twilio sees your phone number and the content of the text message.
• Beehiiv. Powers the newsletter. If you subscribe, Beehiiv receives your email address and manages delivery. You can unsubscribe from any issue. Your email is not shared beyond Beehiiv.
• Google SafeSearch. Screens photos you upload for inappropriate content before they go live. Google receives the image data for screening purposes only.

We do not share your data with any services beyond those listed above, except as required by law.

Cookies

We use cookies only for essential, functional purposes: keeping you signed in and remembering basic preferences. We do not use advertising cookies, tracking cookies, or third-party cookies that follow you across websites.

Your rights (GDPR)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate information.
• Request deletion of your data.
• Object to or restrict certain processing of your data.
• Request a portable copy of your data.

To exercise any of these rights, email buddy@buddybuck.com. We will respond within 30 days.

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect about you, to request deletion of that information, and to opt out of any sale of your personal information. We do not sell personal information. To make a request, email buddy@buddybuck.com.

Children

Accounts are intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please email us and we will remove the account and delete the associated data promptly.

Data retention

We keep your data for as long as your account is active. If you ask us to delete your account, we will remove your personal information from our systems within a reasonable timeframe. Some data may be retained in backups for a limited period before being permanently deleted. Anonymous or aggregated data (such as page view counts) may be kept indefinitely because it cannot be linked back to you.

Security

We take reasonable technical and organizational measures to protect your data, including encryption in transit (HTTPS), secure authentication through Supabase, and access controls that limit who can view submissions and account details. That said, no system is perfectly secure. If you discover a security issue, please email us so we can address it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date at the top of this page. Your continued use of the site after a change means you accept the updated policy. If a change is significant, we will make a reasonable effort to notify registered users.

Contact

Questions, data requests, or anything else: buddy@buddybuck.com.