Privacy policy

Plain-English: we don't sell, rent, or share user data. We don't require login. We don't store search history tied to you.

What we collect

• Search event log — each search is logged as a row: the ZIP code or city entered (or, for "near me" searches, your coordinates rounded to ~1 km — never full GPS precision), the resource-type filter, and the result count. No IP address, account, or device ID is stored with it. Searches from automated clients (scripts, HTTP libraries, crawlers) are not logged. Used for aggregate statistics such as coverage gaps; published statistics leave out any figure below 20 searches and never show coordinates.
• Result-click events — when you open a listing from search results we log the listing ID and search ZIP under a random per-session ID (not tied to you) to learn which listings help people.
• Past SNAP calculator records — the previous calculation API recorded household-size, income and estimated-benefit bands. Estimates are now disabled and that endpoint no longer reads or logs household inputs. This change does not delete earlier records.
• Community reports — "open today / closed" quick reports store a one-way hash of your IP for 24-hour rate limiting; feedback and suggested edits store whatever text you submit.
• Pantry-operator accounts — name, email, and optional phone when an operator claims a listing on /pantry. Used only for listing management.
• Listing submissions — the listing details you submit on /submit-resource can be published after review. Your name, email, relationship to the listing, notes and a one-way hash of your IP (for rate limiting) are kept in a private review record and are never published.
• Email signups — if you opt in to updates we store the email you enter and which page you signed up on.
• Donations via PayPal — PayPal collects donor info; we receive only what's needed for a tax-deductible receipt (name, email, donation amount). No card numbers ever touch our servers.
• Privacy-preserving analytics — Cloudflare Web Analytics (no cookies, no cross-site tracking, no fingerprinting) for aggregate page-view counts.
• Cloudflare server logs — IP address, user agent, URL, timestamp, retained 7 days for abuse prevention only. Never sold.

What we don't collect

• Personal identifiers tied to search queries
• Names, ages, race, or exact income — calculator inputs are stored only as rounded bands (see above)
• Cross-site tracking cookies
• Third-party advertising pixels

Retention

Search, click, and calculator event rows are operational analytics and are periodically purged; community quick-reports expire after 24 hours. Operator-account and email-signup records are kept while the relationship is active — email info@feedam.org to have yours deleted at any time.

Bookmarks (saved resources)

The "★ Save" feature stores resource IDs in your browser's localStorage only — never sent to our servers. Clearing your browser data deletes these.

Children's privacy (COPPA)

The directory is designed for adult use (parents, social workers, case managers). We don't knowingly collect data from children under 13.

Changes

Material changes posted here with a 30-day notice. Last updated: October 19, 2026 — automated clients are no longer logged, published search statistics suppress small counts and coordinates, and listing-submitter details are kept in a private review record. Previous revision June 12, 2026 (itemized search/click/calculator event logging, coordinate rounding, income banding, retention). (This date reflects the last actual revision, not the page render date.)

Contact

Questions: info@feedam.org · Data subject requests (CCPA, GDPR): same address.