Volunteer Clinton County

1. Who we are

Volunteer Clinton County is a free volunteer directory for Clinton County, Pennsylvania. This Privacy Policy applies to the website at volunteerclintoncounty.org and any related services operated under that name.

2. What data we collect

2a. Information you provide

Account registration: name, email address, and optionally a phone number when you create an organization account.
Organization profile: org name, description, address, town, website, contact details, and any other information you add to your org profile.
Listings: opportunity, event, donation need, and board opening content submitted as an organization.
Contact and feedback forms: name, email, phone (optional), and message content when you use a contact or feedback form on the site.
Volunteer inquiries: when you use the contact button on a listing to reach out to an organization, your message and contact details pass through our system on the way to the organization.

2b. Automatically collected data

IP address hash: We store a one-way hash of your IP address for rate limiting purposes (to prevent spam). We cannot reverse this hash to obtain your IP.
Server logs: Vercel (our hosting provider) retains standard web server logs, which may include IP addresses, browser type, and page requests, per Vercel's standard policy.
Session cookies: Supabase sets a session cookie when you sign in. This cookie is required for authentication and expires when you sign out or your session ends.
Local preferences: We store your selected theme (forest, slate, or barn) in your browser's local storage. This stays on your device and is not sent to us.
Public-page usage: On public pages, Microsoft Clarity collects page and device details and interaction data such as clicks, scrolling, pointer movement, page layout, performance, and diagnostic events. We mask page text, form controls, and images before collection begins. We do not use Clarity on sign-in, account, administration, or private volunteer-record pages, and we do not send identity or custom tags to Clarity.
Cookies and tracking technologies: Microsoft Clarity uses first- and third-party cookies and other tracking technologies to provide session replay and heatmap measurement. Google Analytics receives cookieless measurement pings by default; its analytics cookies are enabled only if you accept them in our cookie banner. These systems operate independently.
Error and performance data: Sentry receives a small sample of browser and server performance traces and reports about application errors. We disable Sentry session replay and scrub email addresses and other residual personal data from error details before sending them.

3. Public by design

A volunteer directory only works if listings, organization profiles, and contact information are public. When an organization submits a listing, profile content, primary need badge, “right now we need” callout, photos, or similar content, you understand and agree that:

This content is displayed publicly on the site.
It may be indexed by search engines.
It may appear in our Tuesday digest, social media posts, or other places where we promote local opportunities.
It may be cached, archived, or saved by third parties beyond our control.

If you submit content on behalf of an organization, you confirm that you are authorized to do so.

4. How we use your data

To operate and maintain the volunteer directory.
To authenticate organization accounts and manage org profiles.
To deliver volunteer inquiries to the organizations they are addressed to.
To send transactional emails (e.g., account confirmations, listing expiry reminders, password resets).
To send the Tuesday digest to subscribers who have opted in.
To rate-limit form submissions and prevent spam.
To moderate listings, investigate abuse reports, and enforce our Posting Guidelines.
To respond to contact form submissions and support requests.
To produce aggregate, de-identified statistics about directory use.
To understand how public pages are used, identify confusing interactions, and improve page reliability and performance.

5. When you contact an organization

When you use a contact button on a listing, your message and the contact information you provide pass through our system and are delivered to that organization by email. We store a copy of your message for moderation, abuse prevention, and operational purposes.

Once your message reaches the organization, that organization is responsible for what it does with your information — how it stores it, how it uses it, whether and how it contacts you. Volunteer Clinton County is not responsible for the data practices of organizations listed in the directory. If you have concerns about how a specific organization handles your information, contact that organization directly.

6. Service providers

We do not sell, rent, or trade your personal data. We share data only with service providers who help us operate the directory:

Supabase (supabase.com) — database, authentication, and abuse safeguards. Account data, listings, contact form submissions, and short-lived one-way hashes used to coordinate flood protection are stored in Supabase's managed Postgres instance. Raw flood-guard identifiers are not stored. Supabase does not use your data for advertising.
Resend (resend.com) — transactional email delivery. We send your email address to Resend when sending you a transactional email or delivering a contact form message to an organization.
Vercel (vercel.com) — web hosting and edge delivery. Standard request/response logs may include IP addresses.
Microsoft Clarity (clarity.microsoft.com) — privacy-masked behavioral measurement, heatmaps, and session replay on public pages. Microsoft receives and processes this usage data to provide Clarity and may collect and use it as described in the Microsoft Privacy Statement.
Google Analytics (analytics.google.com) — aggregate public-page traffic and completed-action measurement. We do not include names, email addresses, free text, or private record IDs in custom events.
Sentry (sentry.io) — error monitoring and sampled browser and server performance tracing. Session replay is disabled.

We may also disclose personal data if required by law, subpoena, court order, or to protect the rights and safety of users or the public.

7. The Tuesday digest

We offer an opt-in weekly digest that goes out on Tuesday mornings with new ways to help in Clinton County. You only receive the digest if you subscribe through the form on our site. Every digest email includes an unsubscribe link, and unsubscribing takes effect immediately. We use subscriber email addresses only to deliver the digest. We do not share, sell, or repurpose them.

8. Aggregate and de-identified data

We may use aggregate, de-identified data — totals, counts, and trends that do not identify any individual or organization — for any purpose, including community reporting, grant applications, social media posts, and improvements to the directory.

9. Data retention

We retain account and listing data while your account is active. Expired listings are removed from public view but may persist in database backups for up to 90 days. Contact form submissions and quick submissions are retained for administrative and moderation purposes. Short-lived one-way hashes used for abuse safeguards expire automatically on a rolling basis.

Microsoft Clarity retains playback data for 30 days and click and heatmap data for 9 months. A Clarity session that we deliberately label or favorite may be retained for 9 months. Microsoft deletes Clarity server data, including backups, after the applicable period. See Microsoft's Clarity data retention documentation.

10. Children's privacy

Volunteer Clinton County does not accept account registrations from anyone under 13 and does not knowingly collect personal data from minors under 13. Browsing the public directory does not involve creating an account or submitting personal information.

Minors who find opportunities through the directory should do so under the supervision of a parent or guardian, who is responsible for contacting organizations on behalf of the minor and evaluating opportunities for suitability. If you believe a minor has provided personal information to us, contact us and we will delete it.

11. Your rights

If applicable law grants you specific rights regarding your personal data — such as access, correction, or deletion — you may exercise those rights by contacting us, and we will respond as required by that law. Pennsylvania does not currently grant residents specific statutory rights of access, correction, or deletion of personal data held by directory services like ours, so for most Clinton County users, no such rights are guaranteed by state law. If your state or country grants different rights, those apply to you.

Deleting an organization account may affect the display of profiles, listings, and historical content that other users have relied on. We may retain some information where required by law or for legitimate operational purposes such as fraud prevention or dispute resolution.

12. Security

We use commercially reasonable security practices including encrypted connections (HTTPS), Supabase Row Level Security policies, hashed passwords (managed by Supabase Auth), and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security of your data. If we become aware of a security incident affecting your personal data, we will notify affected users in accordance with applicable law.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the most recent change. Continued use of the site after changes constitutes acceptance of the updated policy.

14. Contact

Questions about this policy?

Use our contact form