Volunteer Clinton County

1. Who we are

Volunteer Clinton County is a free volunteer directory for Clinton County, Pennsylvania. This Privacy Policy applies to the website at volunteerclintoncounty.org and any related services operated under that name.

2. What data we collect

2a. Information you provide

Account registration: name, email address, and optionally a phone number when you create an organization account.
Organization profile: org name, description, address, town, website, contact details, and any other information you add to your org profile.
Listings: opportunity, event, donation need, and community drive content submitted as an organization.
Contact and feedback forms: name, email, phone (optional), and message content when you use a contact or feedback form on the site.
Volunteer inquiries: when you use the contact button on a listing to reach out to an organization, your message and contact details pass through our system on the way to the organization.

2b. Automatically collected data

IP address hash: We store a one-way hash of your IP address for rate limiting purposes (to prevent spam). We cannot reverse this hash to obtain your IP.
Server logs: Vercel (our hosting provider) retains standard web server logs, which may include IP addresses, browser type, and page requests, per Vercel's standard policy.
Session cookies: Supabase sets a session cookie when you sign in. This cookie is required for authentication and expires when you sign out or your session ends.
Local preferences: We store your selected theme (forest, slate, or barn) in your browser's local storage. This stays on your device and is not sent to us.

3. Public by design

A volunteer directory only works if listings, organization profiles, and contact information are public. When an organization submits a listing, profile content, primary need badge, “right now we need” callout, photos, or similar content, you understand and agree that:

This content is displayed publicly on the site.
It may be indexed by search engines.
It may appear in our Tuesday digest, social media posts, or other places where we promote local opportunities.
It may be cached, archived, or saved by third parties beyond our control.

If you submit content on behalf of an organization, you confirm that you are authorized to do so.

4. How we use your data

To operate and maintain the volunteer directory.
To authenticate organization accounts and manage org profiles.
To deliver volunteer inquiries to the organizations they are addressed to.
To send transactional emails (e.g., account confirmations, listing expiry reminders, password resets).
To send the Tuesday digest to subscribers who have opted in.
To rate-limit form submissions and prevent spam.
To moderate listings, investigate abuse reports, and enforce our Posting Guidelines.
To respond to contact form submissions and support requests.
To produce aggregate, de-identified statistics about directory use.

5. When you contact an organization

When you use a contact button on a listing, your message and the contact information you provide pass through our system and are delivered to that organization by email. We store a copy of your message for moderation, abuse prevention, and operational purposes.

Once your message reaches the organization, that organization is responsible for what it does with your information — how it stores it, how it uses it, whether and how it contacts you. Volunteer Clinton County is not responsible for the data practices of organizations listed in the directory. If you have concerns about how a specific organization handles your information, contact that organization directly.

6. Service providers

We do not sell, rent, or trade your personal data. We share data only with service providers who help us operate the directory:

Supabase (supabase.com) — database and authentication. Account data, listings, and contact form submissions are stored in Supabase's managed Postgres instance. Supabase does not use your data for advertising.
Resend (resend.com) — transactional email delivery. We send your email address to Resend when sending you a transactional email or delivering a contact form message to an organization.
Upstash (upstash.com) — Redis-based rate limiting. We send hashed IP addresses only; no personal data is shared.
Vercel (vercel.com) — web hosting and edge delivery. Standard request/response logs may include IP addresses.

We may also disclose personal data if required by law, subpoena, court order, or to protect the rights and safety of users or the public.

7. The Tuesday digest

We offer an opt-in weekly digest that goes out on Tuesday mornings with new ways to help in Clinton County. You only receive the digest if you subscribe through the form on our site. Every digest email includes an unsubscribe link, and unsubscribing takes effect immediately. We use subscriber email addresses only to deliver the digest. We do not share, sell, or repurpose them.

8. Aggregate and de-identified data

We may use aggregate, de-identified data — totals, counts, and trends that do not identify any individual or organization — for any purpose, including community reporting, grant applications, social media posts, and improvements to the directory.

9. Data retention

We retain account and listing data while your account is active. Expired listings are removed from public view but may persist in database backups for up to 90 days. Contact form submissions and quick submissions are retained for administrative and moderation purposes. IP address hashes used for rate limiting expire on a rolling short-term basis.

10. Children's privacy

Volunteer Clinton County does not accept account registrations from anyone under 13 and does not knowingly collect personal data from minors under 13. Browsing the public directory does not involve creating an account or submitting personal information.

Minors who find opportunities through the directory should do so under the supervision of a parent or guardian, who is responsible for contacting organizations on behalf of the minor and evaluating opportunities for suitability. If you believe a minor has provided personal information to us, contact us and we will delete it.

11. Your rights

If applicable law grants you specific rights regarding your personal data — such as access, correction, or deletion — you may exercise those rights by contacting us, and we will respond as required by that law. Pennsylvania does not currently grant residents specific statutory rights of access, correction, or deletion of personal data held by directory services like ours, so for most Clinton County users, no such rights are guaranteed by state law. If your state or country grants different rights, those apply to you.

Deleting an organization account may affect the display of profiles, listings, and historical content that other users have relied on. We may retain some information where required by law or for legitimate operational purposes such as fraud prevention or dispute resolution.

12. Security

We use commercially reasonable security practices including encrypted connections (HTTPS), Supabase Row Level Security policies, hashed passwords (managed by Supabase Auth), and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security of your data. If we become aware of a security incident affecting your personal data, we will notify affected users in accordance with applicable law.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the most recent change. Continued use of the site after changes constitutes acceptance of the updated policy.

14. Contact

Questions about this policy?

Use our contact form