Serving Clinton County, Pennsylvania since 2026
Volunteer
Clinton County
HomePrivacy Policy

Privacy Policy

Last updated: 2026-05-10

Plain-English summary
  • We collect only what we need to run the directory.
  • We do not sell your data. We never have. We never will.
  • We use Supabase (data storage), Resend (email), Upstash (rate limiting), and Vercel (hosting). None of these partners sell your data.
  • You can request deletion of your account and data by contacting us.

1. Who we are

Volunteer Clinton County is operated by Volunteer Clinton County. This Privacy Policy applies to the website at volunteerclintoncounty.org and any related services.

2. What data we collect

2a. Information you provide

  • Account registration: name, email address, and optionally a phone number when you create an organization account.
  • Organization profile: org name, description, address, town, website, contact details, and any other information you add to your org profile.
  • Listings: all content you submit as opportunity, event, donation need, or community drive listings.
  • Quick submissions and contact form:name, email, phone (optional), and message content when you use the "Post a Need" form or contact form.

2b. Automatically collected data

  • IP address hash: We store a one-way hash of your IP address for rate limiting purposes (to prevent spam). We cannot reverse this hash to obtain your IP.
  • Usage logs:Vercel (our hosting provider) retains standard web server logs, which may include IP addresses, browser type, and page requests. These logs are retained per Vercel's standard policy.
  • Cookies and session data: Supabase sets a session cookie when you sign in. This cookie is required for authentication and expires when you sign out or your session expires.

3. How we use your data

  • To operate and maintain the volunteer directory.
  • To authenticate organization accounts and manage org profiles.
  • To send transactional emails (e.g., invitation confirmations, listing expiry reminders). We do not send marketing emails without explicit opt-in.
  • To rate-limit form submissions and prevent spam (using IP address hashes).
  • To moderate listings and enforce our Posting Guidelines.
  • To respond to contact form submissions and support requests.

4. How we share your data

We do not sell, rent, or trade your personal data to third parties. We share data only with service providers who help us operate the directory:

  • Supabase(supabase.com) — database and authentication. Data is stored in Supabase's managed Postgres instance. Supabase does not use your data for advertising.
  • Resend (resend.com) — transactional email delivery. We send your email address to Resend only when sending you a transactional email.
  • Upstash (upstash.com) — Redis-based rate limiting. We send hashed IP addresses only; no personal data is shared.
  • Vercel (vercel.com) — web hosting and edge delivery. Standard request/response logs may include IP addresses.

We may disclose personal data if required by law, court order, or to protect the rights and safety of users or the public.

5. Data retention

We retain account and listing data as long as your account is active. Expired listings are removed from public view but may be retained in backups for up to 90 days. Quick submission records are retained for administrative review purposes for up to 2 years. IP address hashes used for rate limiting expire after 24 hours.

6. Your rights

You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at our contact form. We will respond within 30 days. Note that deleting your account may affect the display of organization profiles and listings you have submitted.

7. Children's privacy

This website is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us for immediate deletion.

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), Supabase Row Level Security policies, hashed passwords (managed by Supabase Auth), and rate limiting. No method of transmission or storage is 100% secure; we cannot guarantee absolute security of your data.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent change. Continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Contact us:

Use our contact form