Privacy Policy

Last Updated: January 13, 2025

Welcome to When It Was. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Information You Provide to Us:

• Account Information: When you register as a contributor, we collect your email address, username, first name, last name, and optional location information (current city, hometown, where you grew up).
• Content Submissions: Historical photos, business information, stories, comments, and trivia that you submit to our platform.
• Communications: Any messages or feedback you send to us through our contact forms or email.

Information Collected Automatically:

• Usage Data: Pages visited, features used, time spent on the site, and interactions with content.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Location Data: When you search for or interact with locations on our map (not your personal location unless you provide it).
• Cookies and Tracking: We use cookies to remember your preferences and improve your experience.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our historical location database service
• Create and manage your contributor account
• Display your submitted content (photos, stories, comments) with proper attribution
• Send you service-related communications and updates
• Improve and personalize your experience on our platform
• Prevent fraud, abuse, and ensure platform security
• Analyze usage patterns to improve our service
• Respond to your questions and provide customer support
• Comply with legal obligations

3. Third-Party Services

We use the following third-party services that may collect information:

Google AdSense

We use Google AdSense to display advertisements. Google may use cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

Supabase (Database & Authentication)

We use Supabase to securely store your account information and content submissions. Supabase complies with GDPR and other privacy regulations. Learn more at Supabase Privacy Policy.

Google Maps API

Our interactive map uses Google Maps API. Google's privacy policy applies to map usage. View Google's Privacy Policy.

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these circumstances:

• Public Content: Content you submit (photos, stories, comments) is displayed publicly with your username attribution.
• Service Providers: With trusted third-party services (Supabase, Google) that help us operate our platform.
• Legal Requirements: When required by law, court order, or to protect our rights and safety.
• Business Transfers: If we merge with or are acquired by another company, your information may be transferred.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your login status and preferences
• Analyze site traffic and usage patterns
• Deliver personalized advertisements (Google AdSense)
• Improve site functionality and user experience

You can control cookies through your browser settings. However, disabling cookies may limit some site functionality.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate information in your account settings.
• Deletion: Request deletion of your account and associated data.
• Opt-Out: Unsubscribe from marketing emails (service emails may still be sent).
• Content Control: Edit or delete your submitted comments, photos, and stories through your contributor portal.
• Data Portability: Request a copy of your data in a portable format.

To exercise these rights, please contact us using the information below.

7. Data Security

We implement reasonable security measures to protect your information, including:

• HTTPS encryption for all data transmission
• Secure authentication through Supabase
• Regular security updates and monitoring
• Access controls and data backup procedures

However, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.

8. Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Users

Our service is operated in the United States. If you access our service from outside the U.S., your information will be transferred to and stored in the United States. By using our service, you consent to this transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending an email notification to registered users (for material changes)

Your continued use of our service after changes constitutes acceptance of the updated policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (with certain exceptions)
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time