Privacy Policy

We keep data collection to a minimum. This page explains exactly what we collect, why, and the choices you have.

Last updated: September 12, 2026

1. Information you give us

We collect the information you type into our contact form: your name, email address, the topic you select, your subject, your message, and your consent confirmation, along with the time of submission. We use it to read and respond to your inquiry and to keep a record of legal, correction, or removal requests.

Marketing opt-in and newsletter sending are not enabled in this preview. Sending a request does not subscribe you to marketing. We never sell your information to anyone.

Please do not include sensitive personal information (government ID numbers, financial account numbers, health details, or precise location) in your message.

Business owner accounts

When you create an owner account, we store your name, email address, public passkey credentials, a hash of your recovery code, account sessions, ownership requests and verification notes. We never receive your device biometric data or private passkey. Creating an account does not verify your business relationship or email address; ownership requires a separate review using independently checked business contact information.

We store listing drafts, submitted edits, media captions, uploaded photos and short videos, and review history to operate business profiles. Pending uploads are accessible only to the uploader with approved listing access and our authorized staff. Approved media and listing information are public. Browser photo optimization removes the original metadata; videos may retain metadata. Do not include private information in files or captions.

2. AI conversations

Messages you send to Santa Ana AI are transmitted to third-party AI model providers to generate a response. We do not require an account and do not attach your name to those messages. Providers may process and temporarily retain content under their own policies. Do not share confidential or sensitive information with the assistant.

3. Location and weather

The gas-station finder requests your device location only if you choose distance sorting and grant browser permission. Distance calculations happen on your device; we do not receive or store those coordinates. Directions use the starting point and destination you choose and open them in Google Maps.

Weather forecasts are collected from the National Weather Service using fixed Santa Ana coordinates. Tide predictions and offshore observations come from NOAA; dated daily UV forecasts come from the EPA. They are cached in our Cloudflare database, independently of your personal location.

4. Local storage and cookies

We use your browser’s local storage to remember your accessibility preferences and saved places. This data stays on your device and can be cleared through your browser settings. We do not set advertising cookies and we do not sell or share personal information for cross-context behavioral advertising.

5. Service providers

We use Cloudflare for hosting, database and media storage, AI responses and Turnstile spam protection; NWS, NOAA and EPA for local conditions; SerpAPI for retrieving public Google Maps business details and short attributed review excerpts; OpenFreeMap and OpenStreetMap for maps; locally hosted open-source fonts; and YouTube for embedded videos. Maps and video players load when you request them. These providers may log technical data such as IP address, browser type and request time under their own policies. Form rate limits use an hourly hashed identifier; the raw IP address is not saved in our submissions database.

Business profiles display publicly available business information, ratings and short review excerpts with the reviewer’s public display name and a link to the original review. These are dated snapshots. Contact us through the privacy or removal form if you wish to request correction or removal of personal information appearing in an excerpt.

6. Retention and security

Pending form submissions and unsubmitted listing drafts are deleted after 90 days. Owner sign-in sessions last up to seven days; one-time authentication challenges last five minutes. Expired session and challenge records are periodically deleted. Owner account, claim, review and published-content records are retained while needed to operate the account, verify access and handle disputes. You may request account deletion through the privacy form. Removed or rejected media files are deleted from storage during routine cleanup; approval and removal audit records may remain. Reviewed legal or removal correspondence is retained only as long as needed to handle the request and maintain the relevant record, then deleted. Data is stored with encryption in transit and access controls that prevent public reading of submissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

The Site is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has submitted information, contact us and we will delete it.

8. Your rights

Depending on where you live - including under the California Consumer Privacy Act as amended by the CPRA, and the GDPR/UK GDPR - you may have the right to access, correct, delete, or obtain a copy of your personal information, to limit certain uses, and to not be discriminated against for exercising these rights. We do not sell or share personal information.

To make a request, use the contact form and choose the privacy topic. We will verify your request using the email address you submitted and respond within the timeframe required by applicable law.

9. Changes and contact

We may update this policy; the date above shows the current version. For privacy requests, email info@localcitynet.com or use our contact form.

Visitor reviews

When you submit a visitor review, we collect your display name, email, rating, review, consent record and submission date. If approved, your display name, rating, review and date appear publicly on the business profile. Your email and moderation notes are not published. We use email to detect duplicate submissions; email ownership is not currently verified. Pending submissions are removed after 90 days. Approved reviews remain until removed. Use our privacy request form to request access, correction or deletion. The form uses Cloudflare Turnstile for spam protection.