Your privacy on Explore Kingston

• No accounts, no tracking cookies, no third-party analytics or ad tech — except inside the 5K registration form, which is Zeffy’s and only loads if you ask for it (see below).
• We never collect consumer health data. For visitor analytics, when you use the “what’s open near me” feature we store only the neighborhood your location falls in — never a coordinate.
• The one exception is the scavenger hunt: a check-in you choose to submit includes your photo and, if you allow it, your precise location. Those are sent to the hunt organizers and kept for 12 months (see the schedule below).
• We never record visits to food or health assistance resources — those taps are dropped and never stored.
• The feedback tab asks for a rating and a comment, and offers your name and email as optional fields so we can reply. Leave them blank and your feedback stays anonymous. Comments are checked for abusive wording by an outside service before we store them — see below.
• Everything we keep is on a published schedule and then deleted (see below).
• You can ask to see or delete your data at any time — no account required. We respond within 45 days.

Washington’s My Health My Data Act (RCW 19.373) protects “consumer health data,” which is defined broadly enough to include precise location that could imply a visit to a health service. Our approach is to stay outside that regulated core by never collecting consumer health data at all:

• Analytics location is opt-in and area-only.The “what’s open near me” feature asks before it uses your location, and only after you accept the browser’s own permission prompt. We classify the reading into a named neighborhood on the server and immediately discard the coordinates — for analytics, only the neighborhood bucket is stored, and only in aggregate. (The scavenger hunt is separate — see below — because there the precise check-in is content you choose to send.)
• The side switcher never sends your location anywhere.The “use my location” button (Kingston side / Edmonds side) runs only when you tap it: your position is checked on your device and immediately discarded, and all that’s saved is a one-word cookie recording which side you chose — no coordinate ever leaves your device.
• We never track use of food or health resources. Taps on food-bank or health-assistance links are dropped at our servers and never recorded — not counted, not sampled, nothing.
• You have rights. You can see or delete your data (below); a legal hold can pause a deletion only where the law requires records to be preserved, and we log that instead.

This schedule is enforced by an automated job that runs against the same list shown here. When a window passes, the data is deleted.

Before the analytics feature uses your device location, it asks — with a plain description of what happens (it sorts a list by distance and adds one anonymous neighborhood-level count to Kingston’s visitor stats). Declining loses nothing: the list still works, sorted by walking time from the ferry dock. You can withdraw consent any time by declining the next prompt or clearing your browser’s site data; for analytics, nothing tied to you persists between sessions.

The scavenger hunt is different: a check-in you submit is content you send to the hunt organizers on purpose, so it is kept for 12 months (see the schedule above). To have a submission removed sooner, use the delete form below.

The feedback tab on the side of each page asks two things: a star rating, and whatever you want to tell us. It also records which page you were on when you opened it, so we can tell which part of the site you meant.

It also offers your name and email, both optional. They exist so someone can reply to you. Leave them blank and nothing identifies your submission — that is still the normal case, and the form works exactly the same either way. We don’t check that an address is really yours, so if you ask us to delete feedback by email, a person reviews the match before anything is deleted.

Your comment is read by an outside service before we store it.This site is built and maintained by one person, unpaid, and comments are sent to Anthropic’s API to check whether the wording is abusive. If it is, the comment is rewritten in neutral language and only the rewrite is saved — your original wording never reaches our database. Your name and email are neversent to that service; only the comment text is. Nothing else you do on this site is sent anywhere like this. The one outside form on the site, the 5K registration, is Zeffy’s own and is described next.

One gap we can’t close by design, so we will be plain about it instead: a comment box will accept anything you type into it, including your own name or phone number. If you put personal details in there, this is what happens to them:

• We don’t use them to identify you.Feedback isn’t linked to an account, a profile, or anything else you did on this site.
• We only reply if you asked us toby leaving an email, and we don’t add you to any list.
• Only Chamber administrators can read it. Feedback is never published on the site, never shown to other visitors, and never sold or shared.
• It is deleted after 12 months — the shortest window on the schedule above. It is set short for exactly this reason.
• You can have it removed sooner.If you left an email, use the form below and we can find your submissions by it. If you didn’t — and most people don’t — quote the wording you remember writing instead, because that is then the only way we can locate your entry.

The Chamber’s 5K takes registration and payment through Zeffy, a free ticketing platform for nonprofits. The race page can show Zeffy’s form, but nothing from Zeffy loads until you press Register now. Reading the page sends Zeffy nothing.

Once you press it, the form is Zeffy’s, running inside our page. Zeffy sets its own cookies and runs its own analytics and session recording there. Everything you type into it, your card included, goes to Zeffy, not to us, under Zeffy’s privacy policy. The same is true if you open the form on zeffy.com instead.

From Zeffy, this site keeps only what the race needs: each runner’s name and email, their ticket type, and the order’s t-shirt sizing and shirt count. Any other answer on Zeffy’s form is dropped before it reaches our database. We keep the rest as the table above says, and anonymize it 45 days after race day.

The app is becoming the Greater Kingston Community Chamber of Commerce’s membership records system — the system of record for the Chamber’s own member roster. Member contact data is held under the membership relationship and limited to the minimum the roster needs: organization identity, a contact name, email and phone, membership status and level, renewal and join dates, listing links, and a QuickBooks customer id. It honors each member’s display preferences, is kept on the schedule above, is covered by the same see-and-delete process below, and is fully exportable — the Chamber owns all of its own data.

Money never lives here. Dues invoicing and payments happen in QuickBooks; the app stores no payment-card data of any kind.

You don’t need an account. Tell us how to reach you and we’ll respond within 45 days. Because most of what the app records is anonymous, a request may simply confirm that nothing is tied to you.

Current notice version: 2026-10.

• 2026-10 (2026-09-22) — The 5K race page can now show the registration form of Zeffy, the Chamber's ticketing provider, inside the page. Nothing from Zeffy loads until you press Register now; once you do, Zeffy's own cookies, analytics and session recording run inside that form, and what you type there goes to Zeffy under its own privacy policy. The short version's "no third-party analytics" now names that one exception. Bumped rather than edited quietly because an outside party's code can now run on a page of this site.
• 2026-09 (2026-08-23) — Page feedback now offers an optional name and email so the Chamber can reply, which makes feedback searchable and deletable by address where one was left. Comments are also sent to Anthropic's API to be checked for abusive wording and rewritten neutrally if so — the rewrite is what gets stored, and a name or email is never sent. Bumped rather than edited quietly because this adds both a personal-data field and an outside processor; the Chamber agreed to the re-prompt.
• 2026-08 (2026-08-06) — Page feedback: a rating, a comment, and the page it was sent from, kept 12 months. Added because the comment box is free text — the notice now says plainly what happens to personal details typed into it, and how to have them deleted.
• 2026-07 (2026-07-20) — First versioned notice: area-only location analytics, k-anonymity on published counts, retention schedule, consumer access/delete requests.

Questions? See our about page or reach the Chamber. This notice is being reviewed by the Chamber; it is not a substitute for legal advice.