Privacy

If you submit a business through our submission form, we store what you enter: the business name and details, and the contact name, email address and phone number you provide. We use that information to review the listing editorially and to contact you about it. Submissions are not published automatically — nothing you submit appears on the site unless our editors verify it and choose to publish it.

If you email us, we hold that correspondence in our email account in the ordinary way.

Sign-in exists for Enjoy Tacoma staff only; there are no public reader accounts. For staff accounts, our backend provider stores the account email address, authentication records and sign-in timestamps, along with the staff role assigned to that account.

Staff accounts are created through an administrator-controlled process; Enjoy Tacoma does not accept public account registration.

The Enjoy Tacoma newsletter is not accepting new subscriptions, and we are not collecting email addresses for it anywhere on the site.

One address submitted before signups closed is still held in our subscriber table in an unconfirmed state. It has never been mailed, because outbound email is not configured. Enjoy Tacoma does not currently collect or store hashed IP addresses or user-agent information through newsletter signup. If that address is yours and you want it removed, email us and we will remove it manually.

Enjoy Tacoma editorial staff can access submitted business information and newsletter records for editorial and operational purposes. Anonymous visitors cannot read them: the database blocks public read access to both. We do not sell information, and we do not share it for advertising.

Lovable Cloud (Supabase). Our database, authentication and server functions run here. Information you submit is stored there.

Lovable hosting and Cloudflare. The site is served through Lovable's hosting on Cloudflare infrastructure, which processes ordinary request data such as your IP address in the course of delivering pages and protecting the service.

Google Fonts. Typefaces load from Google's font servers, so your browser contacts Google and Google receives your IP address.

OpenStreetMap. Our map pages load map tiles from OpenStreetMap servers, so your browser contacts them and they receive your IP address when you view a map.

We do not set advertising cookies. If — and only if — you choose to allow analytics, Google Analytics sets its own cookies to recognise a returning browser and group page views into a visit. If you decline, or have not chosen yet, no Google Analytics cookie is set and no Google analytics script is loaded at all. Alongside that, the cookies present are infrastructure cookies set by our hosting and security layer to serve and protect the site.

Your browser's local storage is used for three things: remembering your analytics choice, keeping a staff member signed in after they authenticate, and ordinary application state used by the site's routing and page data. Readers who never sign in are not identified by it.

Analytics on Enjoy Tacoma is optional. When you first visit, we ask whether you want to allow it. Until you accept, analytics storage is set to denied and no measurement script loads. If you decline, it stays that way, and every part of the site keeps working exactly the same — no feature depends on analytics.

If you accept, we use Google Analytics to understand how the site is used in aggregate — which pages are read, and which parts of our place and map tools people actually use — so we can decide what to improve next. We do not use it for advertising, we do not enable personalisation or advertising features, and we do not try to identify individual readers.

With analytics allowed, Google Analytics receives the ordinary information a web analytics service collects: the page address you viewed, the referring page, an approximate location Google derives from your IP address, and general device and browser characteristics. IP addresses are anonymised in our configuration. We do not request or use your browser's precise location. That processing is Google's, and their handling is governed by their own terms.

On top of page views we record a small, fixed set of our own interaction events — using a category or area filter on the Places page, moving between Places and the map, following a nearby place, and following a T Line station link. These events carry only short fixed labels such as a category name, an area name, or a page's short URL name. They do not send street addresses, precise coordinates, walking distances, email addresses, free text you type, browser geolocation, place descriptions, or any field that identifies you personally. Interactions that happen while analytics is declined are not stored up and sent later if you change your mind.

Measurement runs only on the published site at enjoytacoma.com. Our development and preview environments load no analytics tag at all. Microsoft Clarity remains not active; no Clarity identifier is configured and no Clarity tag is loaded.

You can change your mind at any time, on this page. Your choice is remembered in this browser only.

We have adopted retention rules as a publisher policy — they are our own choices, not a legal schedule. Nothing is deleted automatically. These periods make a record eligible for deletion or redaction, at which point it appears in an internal review queue and a person decides.

• Declined business submissions: eligible for deletion 90 days after the decision.
• Approved business submissions: contact name, email and phone eligible for redaction 180 days after approval; the business details are kept as an editorial provenance record.
• Submissions still awaiting a decision: flagged for staff review after 120 days, not deleted.
• Newsletter records that were never confirmed: eligible for deletion after 90 days.
• Newsletter confirmation links expire after 14 days. If an address unsubscribes we keep only what is needed to make sure it is not mailed again.
• Staff accounts and staff invitations that are unused: flagged for review after 60 and 90 days respectively, not deleted automatically.

Published editorial records — places, areas, guides, evidence and business listings — are publication data, not personal data, and are not covered by these periods.

Deleting a record from our database does not reach our providers' own request logs, authentication internals or database backups, which follow their own lifecycles.

You can contact us to ask what we hold about you, to correct it, or to ask us to delete it. Write to editor@enjoytacoma.com.

This is a request channel handled by a person, not automated functionality. Enjoy Tacoma does not currently offer self-service account deletion, automated data export, automatic deletion of submissions or newsletter records, cookie preference controls, or automated processing of privacy requests.

When what we do changes, we change this page in the same update rather than afterwards.