Potluck Buddies (PLB) views user privacy as a very important factor in the development of each of our products and services. PLB is committed to protecting the privacy of website visitors and users of our online services, as we ourselves are advocates of online privacy and data security. PLB has established this document to explain what information we collect through our website and services, and how it is used.
Visits to our website and API requests are generally logged for internal analysis. The information logged is general web server logging information, and is a standard function of internet-based web servers. Once any internal analysis is complete, the logs are stored off-site to a location that is not publicly accessible physically or via the internet. Internal analysis of web server logs occur for the following reasons:
- To ensure security, aiding in the prevention of unauthorized access or attacks.
- To ensure reliability and functionality, aiding in diagnosing technical issues.
- To ensure quality, aiding in the testing and development of services.
- Site metrics, allowing us to see how the site is being used and how traffic is referred to our site.
Voluntarily Submitted Information
For PLB users, some information is required to become a member and utilize all of the available services, such as an email address and password. The email address and password are used for security purposes, providing a method for which the user can identify themselves and access web services. The email address is also used as a method to communicate with our users and is also used to subscribe to our optional email newsletter. All passwords are one-way encrypted immediately upon account creation or when a user requests a password change. Our system never stores old passwords in any format.
For users and guests, we store both required and optional information.
Required information includes an email address and mailing address for purchases from our PLB Shop. This aids in protecting customers against credit card fraud and enables us to ship deliveries of purchased products. We DO NOT store any credit card numbers, expiration dates or security codes. All credit card information is stored by a fully PCI compliant credit card payment system provider. In some cases, a product ordered is delivered by a third party, such as the manufacturer. In this case, we are required to provide the manufacturer your name and address solely for the purpose of shipping the ordered product to the customer.
Optional information includes event and contact data used within our system, allowing users to create and organize Potluck events. Our policy regarding optional information is the same as our email address policy. We do not sell, donate or share this optional information. The only exception to this rule is regarding public event information and venues, where users have the option to create an event or a location that is open to the public. This exception is opt-in only and no such information will be made public without the users' consent.
Email Address Information Between Hosts & Guests
As mentioned above, our system allows users to create events and add contact data, to be used to invite guests to their events. In turn, when an invited guest submits an RSVP for an event they have been invited to, the host's name and email address is then added to the guest's contact list. This action only occurs if the guest was individually invited via a private email invitation.
Our system allows event hosts' to request our system to send invitiation emails to guests they have invited. Additionally, our system may send or be requested to send additional emails regarding an event, before and after an event occurs to notify guests of important or updated event information and additional promotional notifications.
PLB uses a single session cookie which contains a unique session ID. This unique session ID is used for website login/authentication and for the shopping cart. Our session handler is configured to retain shopping cart contents during the session, as well as retaining shopping cart contents for users when they login or logout. A new session ID is generated upon every login or logout and the cookie is set to expire when the user closes the web browser.
We may collect information about your computer, including your IP address, operating system and browser type, for system administration and in order to create reports.
This is statistical data about our users’ browsing actions and patterns.
PLB currently uses Google Analytics. Google Analytics is a web analytics tool that helps website owners understand how visitors engage with their website. Google Analytics customers can view a variety of reports about how visitors interact with their website so that they can improve it. Like many services, Google Analytics uses first-party cookies to track visitor interactions as in our case, where they are used to collect information about how visitors use our site. We then use the information to compile reports and to help us improve our site. Cookies contain information that is transferred to your computer’s hard drive. These cookies are used to store information, such as the time that the current visit occurred, whether the visitor has been to the site before and what site referred the visitor to the web page.
PLB uses Google Conversion tracking cookies to determine how well our Google Ads are performing. Google conversion tracking cookies persist for a limited time only. Conversion tracking data provides an overall view related to ads and search keywords and are not used to match conversion data to specific customers.
PLB does NOT use Google Analytics Remarketing or the Google User-ID feature.
Our credit card payment processor collects device information in an effort to eliminate credit card fraud. PLB currently does not collect or store this device information, nor associate user account information to device information.
PLB currently does not utilize HTML5 local storage or application data caches.
PLB allows the option to Login using various social media services. For users utilizing these services, we only store the social media identifier id. No other personal information available from the social media account login is stored. Some social media services will allow you to access your contacts or "friends" through PLB. Your contacts are only stored in this site if you request it to occur, and only for the purpose of inviting the contact to an event you have created. PLB reserves the right to use social media content which is either public, regards PLB or is posted to our social media groups.
PLB implements Secure Sockets Layer (SSL) encryption of any page which requests or displays user supplied information. We optionally allow users to load any page from our site via SSL. PLB also uses an SSL certificate to verify our website identity in order to ensure data security.