Privacy Policy
What this service is
My Town 360 is a neighborhood feed app for St. Charles, St. Peters, Frenchtown and nearby communities, created and operated by Willow Rain Company LLC. This page explains, in plain language, what information the app handles when you use it and what choices you have. The companion pages are our Terms of Service and our account deletion page.
The short version
Reading is always open — you can browse My Town 360 with no account at all. If you create an account, we store the profile and content tied to that account (below), plus short-lived session logs that are automatically purged after 7 days. We never store a raw IP address in those logs, and we do not sell personal data.
What an account stores
When accounts are open and you are signed in, the service stores, tied to your own account only:
- Profile — your email address, your display name and the profile details you provide, your account's unique ID (UUID), the neighborhood you choose, and your verification status/tier (Reader, Resident, Verified Neighbor, Trusted) and the records that support it.
- Posts — posts you publish, including category, price on For Sale posts, and any neighborhood you post to.
- Comments — comments you write on posts.
- Thanks — the Thanks you give and receive, so counts stay honest and one person cannot thank the same post twice.
- Messages — messages you send and receive, including Business Page threads (for example a quote request that becomes a booked job in one thread).
- Listings & business information — products or services you list, and Business Page information if you claim or run a page.
Your account credentials themselves are handled by our authentication provider (below) — the app never stores your password.
Sign-in and session logs
When you create an account or sign in, we keep a short-lived security log: that a sign-up, sign-in, sign-out, or session revocation happened (account deletion is logged the same way), when it happened, the general type of device (for example, "Android app"), and a scrambled (hashed) form of the network address — never the address itself. We use this log only to keep accounts secure (for example, to spot stolen sign-ins). These logs are automatically deleted after 7 days.
Each log line holds only the event type, the time, that general device label, your account ID, and the hashed network address.
- The IP address is hashed (one-way) before it is stored. A raw IP address is never written to the session log.
- Session logs are used for security and abuse investigation only — never for advertising or profiling.
The 7-day rule
Session logs auto-purge after 7 days. Log lines older than 7 days are deleted automatically; there is no long-term session history.
Account deletion follows the same clock: when you delete your account, it is soft-deleted and your sessions are revoked immediately — you are signed out everywhere at once. You then have a 7-day grace period: sign back in within 7 days to cancel the deletion and restore the account. If the grace period passes, your account is hard-purged — all of your rows (profile, posts, comments, thanks, messages, and listings you own) and your underlying authentication record are permanently deleted and cannot be recovered. A record that a deletion happened is kept only as an anonymous count — no name, no email, no account ID. See Delete your account for the steps.
Processors we use
- Supabase is our backend processor: it provides the database and Supabase Auth (sign-in), and stores the account data described above on our behalf, under Row-Level Security rules so each account can only write its own rows.
- Netlify hosts the website. Like any web host, it may process basic technical information, such as IP addresses and request logs, as part of delivering and securing the site. That is standard web hosting, separate from the app's own session logging described above.
We do not share personal data with data brokers, and the app carries no advertising trackers.
What stays on your device
- Local cache. For speed and offline reading, the app keeps a copy of the feed and your neighborhood choice in your browser's local storage, on your device.
- Clearing it. Clearing your browser's site data for this site removes the local copy. Server-side account data is removed through account deletion (above), not by clearing your browser.
The app does not track your location. The neighborhood you see is the one you pick from a list, not your device's GPS.
Launch-phase honesty
- Sample content: at launch, parts of the feed, Safety list, and catalog are sample content created to demonstrate the app, and are labeled as such where they appear. Sample safety incidents are not live police or emergency data and must not be relied on for safety decisions. Always call 911 for emergencies.
- Sign-in status: the sign-in panel ships honest-disabled until the owner confirms the final sign-in method (magic link + Google). Until accounts open, you are browsing as a Reader and no account data is being collected.
- Store: the Town 360 Store is a catalog display at launch; checkout is not active in the app. When print-on-demand checkout opens, any purchase will happen through the fulfillment provider under their own privacy policy, and this page will be updated first.
What we do not do
- We do not sell your personal data.
- We do not run advertising trackers or share information with data brokers.
- We do not store raw IP addresses in session logs — hashed only, purged after 7 days.
Your choices
- Browse without an account: reading never requires one.
- Delete your account: see Delete your account — in-app steps, plus an email route if you are signed out.
- Questions or requests: email us (below) about the data tied to your account.
Children
This app is not directed at children under 13, and we do not knowingly collect personal information from children under 13.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date. Material changes to what an account stores, or to the 7-day rule, will be reflected here before they take effect in the app.
Contact
Questions about privacy can be sent to willow.rain.llc@gmail.com.