PLAIN LANGUAGE, LOCAL VALUES

Privacy at EACO

Last updated October 28, 2026. This describes the current pilot implementation.

Website analytics

Published business sites measure page visits, device type, referring website or campaign, and actions such as opening a menu, requesting directions, or clicking a phone number. We do not store raw IP addresses or use tracking cookies. A browser session identifier stays in session storage; the server converts it to a pseudonymous identifier that changes daily. Visitor counts represent daily distinct visitors, not unique people across a month.

Analytics ignore requests with Do Not Track enabled and known automated browsers. Preview visits are not recorded. Reports are available to the business’s assigned users and EACO staff. Analytics can be affected by browser blocking or automated traffic.

Business accounts

We store account email, name, securely hashed password, business membership, site content, and an activity log. Session cookies keep you signed in. Invitation links expire after seven days and can be used once.

External services

Hosting uses Vercel. Production storage uses Turso when connected. When you follow an ordering, booking, map, or social link, that provider’s privacy practices apply. External imagery may contact its hosting provider if a business uses an image URL.

Data requests

Business owners can ask their EACO site manager to export or remove their business data through their existing support contact. Before public launch, EACO must establish a published privacy contact and retention schedule.