Privacy Policy

For the Love of Minnesota (“we,” “us,” or “our”) operates the community platform at fortheloveofminnesota.com — an interactive service for Minnesota maps, local discovery, civic information, and community content.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It applies to our website, web application, and any related services we provide (collectively, the “Platform”).

By accessing or using the Platform, you agree to the practices described in this policy. If you do not agree, please discontinue use. This Policy should be read alongside our Terms of Service, which govern your use of the Platform overall.

Account & Profile Information. When you create an authenticated account, we collect your email address (required for OTP verification) and any profile information you choose to provide — including username, display name, biography, profile photo, city or location, and phone number.

Content You Create. We store all content you publish on the Platform, including pins, custom maps, posts, mentions, pages, stories, memories, and collections, along with any associated text, images, and videos.

Location Data. When you place a pin, create a map element, or use a location-based feature, we store the geographic coordinates associated with that content. Device location is accessed only when you explicitly initiate a location-based action — never silently in the background.

Usage & Analytics Data. We automatically collect information about how you interact with the Platform, including pages visited, pins and maps viewed, session identifiers, and a persistent device identifier stored in your browser’s local storage (lom_device_id). Admin accounts are excluded from analytics collection.

Device & Technical Information. We may collect your IP address, browser type and version, operating system, referring URL, and user-agent string to operate and secure the Platform.

Payment Information. Billing is handled entirely by Stripe. We do not store your full card number or sensitive payment details. We receive and retain a Stripe customer ID, subscription status, and plan information.

Guest Account Data. If you use the Platform as a guest, limited data (such as map bookmarks) is stored in your browser’s local storage only. This data is not transmitted to our servers and is lost if you clear your browser data.

We collect information through three primary channels:

Directly From You. When you register, update your profile, create content, submit community edits, contact support, or complete a subscription purchase.

Automatically. As you use the Platform, we collect usage data through our first-party analytics system and through cookies and similar tracking technologies operated by Google Analytics and Meta Pixel (described further in Section 6).

From Third Parties. We receive limited information from Stripe (subscription and billing status) and from Mapbox (geocoding responses when you use location search). We do not purchase or receive personal data from data brokers.

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features.
• Authenticate your identity and secure your account via OTP verification.
• Process subscription payments and manage your billing relationship through Stripe.
• Personalize your experience, such as surfacing local content relevant to your location.
• Send transactional communications — account verification, billing receipts, and security alerts — via Resend.
• Measure and analyze Platform usage to understand how features are used and where to improve.
• Detect, investigate, and prevent fraudulent activity, abuse, and security incidents.
• Comply with applicable legal obligations.
• Operate AI-powered features (page chat, content suggestions) through OpenAI.

We do not sell your personal information to third parties, and we do not use your data to serve targeted advertising outside of the limited attribution tracking described in Section 6.

Public Content. Content you publish with a “Public” visibility setting is accessible to all visitors, including unauthenticated users. Unauthenticated visitors see a limited preview of public content.

Service Providers. We share information with trusted third-party vendors who help us operate the Platform. Each provider receives only the data necessary for their specific function and is prohibited from using it for other purposes. See Section 7 for the full list.

Admin Access. Platform administrators may access account and content data for moderation and operational purposes. Admin access is limited in scope and subject to confidentiality obligations.

Legal Requirements. We may disclose your information if required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect the rights, property, or safety of For the Love of Minnesota, our users, or the public.

Business Transfers. If For the Love of Minnesota is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

With Your Consent. We may share your information in other ways when you have given us explicit permission to do so.

First-Party Analytics. We use a custom analytics system to track page views, pin views, and map views. A device identifier (lom_device_id) is stored in your browser’s local storage to correlate sessions across visits. No cross-site tracking occurs through this system.

Google Analytics (GA4). We use Google Analytics 4 to understand aggregate usage patterns. Google may set cookies and collect data subject to Google’s Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on.

Meta (Facebook) Pixel. We use the Meta Pixel to measure the effectiveness of advertising and to understand how visitors reach our Platform. Meta may collect data subject to Meta’s Privacy Policy. You can manage your ad preferences through Meta’s Ad Preferences.

Essential Cookies. We use session cookies required for authentication and core Platform functionality. These cannot be disabled without impairing your ability to use the Platform.

The following providers process data on our behalf. Each is bound by data processing agreements and their own privacy commitments.

• StripePayment processing; stores billing and subscription data
• SupabaseDatabase infrastructure, authentication, and row-level security
• MapboxMap rendering, geocoding, and location search
• OpenAIAI-powered features; processes content you submit to AI tools
• ResendTransactional email delivery (verification, billing, alerts)
• Google AnalyticsAggregated usage analytics
• Meta PixelAdvertising attribution and reach measurement

We do not sell data to these providers beyond what is necessary for the services they render.

We retain your personal information for as long as your account is active or as needed to provide the Platform. Specifically:

• Account data is retained until you delete your account, after which it is removed or anonymized within 30 days, except where retention is required by law.
• Public content (pins, maps, posts) you delete is removed from public view immediately; copies in backups are purged on a rolling schedule.
• Billing records are retained for up to 7 years as required by tax and financial regulations.
• Analytics data is retained in aggregate or anonymized form indefinitely for Platform improvement.
• Guest data stored in browser local storage is never transmitted to our servers and is controlled entirely by you.

Access & Correction. You may review and update your account information at any time through your Settings page.

Deletion. You may delete your account through Settings. Upon deletion, your profile and private content are removed from public view. Some data may be retained as described in Section 8.

Discoverability. You may control whether your profile appears in Platform search results and recommendations through your Privacy Settings.

Location Permissions. You may revoke location access at any time through your device or browser settings. Revoking permission disables location-based features but does not affect previously stored pin coordinates.

Analytics Opt-Out. You may opt out of Google Analytics using the browser add-on linked in Section 6. You may opt out of Meta tracking through Meta’s Ad Preferences.

Minnesota Residents. Minnesota law may afford you additional rights regarding your personal data. To exercise any of these rights, contact us at loveofminnesota@gmail.com. We will respond within 45 days.

California Residents. If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact us at the email above.

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Row-Level Security (RLS) enforced at the database layer via Supabase — ensuring users can only access data they are authorized to view.
• Encrypted data transmission over HTTPS for all Platform communications.
• OTP-based authentication — no persistent passwords stored on our servers.
• Access controls limiting data access to personnel with a legitimate operational need.

No security system is impenetrable. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

The Platform is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at loveofminnesota@gmail.com and we will take steps to delete that information promptly.

Users between the ages of 13 and 17 must have a parent or legal guardian review this Privacy Policy and agree to it on their behalf before using the Platform.

The Platform may contain links to third-party websites, including news articles aggregated from external publishers and government data sources. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

Civic and government data displayed on the Platform is sourced from public Minnesota databases. The privacy practices of those government sources are governed by their own policies and applicable Minnesota public records law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice — such as a notification within the Platform or an email to your registered address.

Your continued use of the Platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

This Privacy Policy is effective as of April 17, 2026.