Privacy policy

This policy explains what Tenfold Commerce LLC ("we"), of Raleigh, North Carolina, collects when you use Our Town Heritage and the Town Boutique, why, and what you can do about it. We don't sell your personal information.

What we collect

• Orders. Your name, shipping address, email address, what you ordered and what you paid. Stripe handles your card; we never see or store card numbers.
• Accounts. Looking around never needs an account. To share a photo, add a note or vote, you sign in with Google, Facebook or email. We keep a permanent internal ID, the display name you choose, how you want to be credited, and your email address if you sign in by email or add one. With Google we receive your name, email address and whether Google has verified it. With Facebook we use your name and the ID Facebook gives our app; we don't use the email address Facebook may send. We don't keep Google or Facebook access tokens and we never post anything for you.
• Contest entries and shared photos. The photo, what you tell us about it, who shared it, and the exact rules you agreed to and when. Agreeing lets us show the photo with credit on our website, our social media and the town's archive. Prints or merchandise always need your separate yes.
• Email signups. Your email address, your town, when you signed up and whether you've unsubscribed.
• Messages. What you send through the Contact form or a data deletion request: your name, email address, order number (if you give one) and your message.
• Votes and abuse checks. Votes are linked to your account so each account gets one vote per day; we never show who voted for what. IP addresses are stored only as keyed hashes, and votes keep hashed network and device signals to stop vote fraud.
• Visits. A daily, cookie-free visit count (a keyed hash of your IP address and browser, not who you are), and which products are viewed or added to a bag, so we know what people like.

Who helps us run it

• Stripe processes payments.
• Printful prints and ships your order, so it receives your name, shipping address and what you ordered.
• Cloudflare Turnstile checks that forms are sent by a person; see Cloudflare's Turnstile Privacy Addendum.
• Resend delivers our emails.
• Netlify hosts the site and its database.
• Google and Facebook (Meta) only when you choose to sign in with them.

Cookies

• Your bag is kept in a secure, HTTP-only cookie.
• Signing in sets one secure, HTTP-only cookie on ourtownheritage.com and its town pages, so one sign-in works in every town. It lasts until you've been away for 90 days. "Sign out everywhere" ends every session at once.
• Ad links. When you arrive from one of our ads, we keep the link's campaign tag for 30 days to know which ads work.
• Marketing cookies (the Meta Pixel) load only if we show you a cookie notice and you choose Accept. "Necessary only" loads none.

Instagram and Facebook content

Town pages can show public Instagram posts about the town, found under the town's own hashtags (for example #carthagemo) or chosen by us, and checked before they show. Each one shows only as Instagram's own embed, with its owner's name and a link back to them: we never download, copy or store the picture or video, and never use a post in ads, emails or products. We keep the post's link and a short excerpt of its caption, to show it and to record why it was shown. When a post shows, your browser loads it from Instagram (Meta), which may set its own cookies under Meta's privacy policy; we don't receive anything about you from it. Want one of your posts taken off a town page? Tell us its link through the Contact form and we remove it, usually the same day.

Email

Every newsletter has an unsubscribe link, and one click stops it. Order emails (confirmation, shipping) are sent because you ordered.

Your choices

• You can delete your account at any time from the account menu, or ask us to delete your information on our data deletion page.
• Want a copy of your information, or something corrected? Write to accounts@tenfoldcommerce.com.

Children

The site is for a general audience. A photo of a minor shared to the archive is held until a parent or guardian confirms it. We don't knowingly collect information from children under 13.

Changes

If this policy changes, we'll update this page and its date. Questions: accounts@tenfoldcommerce.com.