Introduction

Welcome to GoTurlock. This Privacy Policy explains how we collect, use, and protect information when you use our website. GoTurlock is a web application that aggregates publicly available local event information (such as garage sales and Christmas light displays) in Turlock, California.

By using GoTurlock, you agree to the practices described in this Privacy Policy.

Information We Collect

GoTurlock is designed with privacy in mind. We minimize data collection:

• Optional Accounts: You can use GoTurlock without creating an account. If you choose to sign in with Google, Apple, or email magic link, we collect basic profile information (see below).
• Account Data (if you sign in): When you sign in with Google or Apple, we receive and store your name, email address, and profile picture. When you sign in with an email magic link, we store your email address. This data is used solely for account management and is not shared with third parties. Note: Apple may provide a private relay email address if you choose to hide your email.
• Session Data: When you sign in, we collect and store your IP address and browser/device information (user agent) for security purposes. This helps us detect unauthorized access and protect your account.
• Analytics: We use Google Analytics 4 to collect anonymous usage data such as pages visited, time spent on pages, and general geographic location (city/country level). This helps us understand how visitors use GoTurlock so we can improve the service.
• Advertising: We display advertisements through Google AdSense. Google may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising by visiting Google Ad Settings.
• Location Data (Optional): GoTurlock offers optional features that use your device's location, including one-time location lookup and live location tracking. These features are entirely optional and only activated when you explicitly enable them by clicking the location controls on the map. Your location data is processed entirely in your browser and is never transmitted to our servers or stored anywhere. Live tracking can be stopped at any time by clicking the tracking control again. We recommend disabling live tracking when not in use to preserve battery life.

Session and Cookie Data

When you sign in to GoTurlock, we use cookies to maintain your authentication session:

• Authentication Cookies: We store a session token in a cookie to keep you signed in. This cookie is essential for the sign-in feature to work and cannot be disabled while signed in.
• Session Duration: Your session remains active for 7 days from your last activity. If you use GoTurlock within this period, your session is automatically extended. You can sign out at any time to end your session immediately.
• Session Security Data: Each session stores your IP address and browser information (user agent) to help detect unauthorized access to your account.
• Account Linking: If you sign in with different providers (e.g., Google and Apple) using the same email address, your accounts are automatically linked to prevent duplicate accounts.

Note: Authentication cookies are separate from third-party cookies used by Google Analytics and Google AdSense. You can manage third-party cookies through your browser settings or the opt-out links provided in this policy.

How We Use Information

GoTurlock aggregates publicly available event information from various sources to display local events on a map. This information includes:

• Event addresses and locations (publicly posted)
• Event dates and times (publicly posted)
• Event descriptions (publicly posted)

This data is scraped from public sources and cached temporarily to improve performance. We do not store any user-specific browsing information.

Data Storage and Security

Event data is cached on our servers for up to 24 hours to improve performance and reduce load on source websites. This cached data contains only publicly available event information and no user data.

If you create an account, your personal data (name, email, profile picture) is stored securely in our database. OAuth tokens from social providers are encrypted and stored securely. We use industry-standard security measures to protect your data, including secure HTTPS connections for all data transmission.

Data Retention

We retain different types of data for different periods:

• Account Data: Your name, email, and profile picture are retained until you request account deletion.
• Session Data: Session information (including IP address and user agent) is automatically deleted 7 days after your last activity, or immediately when you sign out.
• Magic Link Tokens: Email verification tokens expire and are deleted after 5 minutes.
• OAuth Tokens: Access and refresh tokens from social providers are retained while your account is active to maintain your sign-in connection.
• After Account Deletion: When you delete your account, all your data is immediately and permanently deleted from our systems. This includes your profile, sessions, and connected social accounts. This action cannot be undone.

Third-Party Services

GoTurlock uses the following third-party services:

• Google Analytics 4: For understanding how visitors use our website. Google Analytics collects anonymous data about page views, session duration, and general location. For more information, see Google's Privacy Policy.
• Google AdSense: For displaying advertisements. Google AdSense may use cookies and collect information about your browsing activity to show personalized ads. You can manage your ad preferences at Google Ad Settings. For more information, see How Google uses information from sites that use our services.
• Google Maps Geocoding API: For geocoding addresses to map coordinates. No personal user data is shared with this service. For more information, see Google's Privacy Policy.
• Leaflet/OpenStreetMap: For displaying maps. Map tiles are loaded from OpenStreetMap servers.
• Google OAuth: For optional account sign-in. When you sign in with Google, we receive your name, email address, and profile picture from Google. For more information, see Google's Privacy Policy.
• Apple OAuth (Sign in with Apple): For optional account sign-in. When you sign in with Apple, we receive your name and email address. Apple may provide a private relay email address if you choose to hide your real email. For more information, see Apple's Privacy Policy.
• Resend (Email Service): For sending authentication emails when you sign in with an email magic link. We use Resend to deliver sign-in emails containing secure, time-limited authentication links. Resend processes your email address solely to deliver these emails. For more information, see Resend's Privacy Policy.
• GitLab Error Tracking: For monitoring and fixing application errors. When an error occurs, we collect technical information about the error including the error message, stack trace, browser type, and general context about what action was being performed. No personally identifiable information is intentionally collected. This data is retained for 90 days and helps us identify and fix bugs to improve your experience. For more information, see GitLab's Privacy Policy.

Your Choices

You have options regarding Google services used on this site:

• Opt out of personalized ads: Visit Google Ad Settings to manage your ad personalization preferences
• Opt out of Google Analytics: Install the Google Analytics Opt-out Browser Add-on
• Use your browser's Do Not Track setting
• Use a privacy-focused browser or browser extension that blocks tracking scripts

Your Rights and Choices

If you use GoTurlock without signing in, we do not collect any personal data about you.

If you have created an account, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of all personal data we hold about you, including your account information and session history.
• Right to Correction: You can request correction of any inaccurate personal data. Note that name and email from OAuth providers are updated automatically when you sign in.
• Right to Access Your Data: You can view your account information, connected login providers, and active sessions at any time by visiting your profile page when signed in.
• Right to Deletion: You can delete your account at any time from the user menu or your profile page when signed in. All your data will be immediately and permanently deleted. You can also contact us at [email protected] if you need assistance.
• Right to Data Portability: You can request an export of your personal data in a machine-readable format.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. Note: GoTurlock does not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of Personal Information Collected: If you create an account, we collect identifiers (name, email address), internet activity information (IP address, browser type), and profile information (profile picture from OAuth providers).

How to Submit a Request: To exercise your CCPA rights, contact us at [email protected] with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days.

Children's Privacy

GoTurlock is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account or provide any personal information to us.

If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child under 13, please contact us at [email protected].

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].