Privacy Policy

This policy explains what fueldelivery.org (“we”) collects when you use fueldelivery.org, how long we keep it, and who processes it on our behalf. We’ve tried to keep this short and concrete.

What we collect

• Server logs. Each request is logged with IP address, user agent, the requested URL, the referring URL, and a timestamp. This is standard for any web server and is needed to keep the site online and to investigate abuse.
• Form submissions. If you fill out the contact form or any other form on the site, we receive whatever you typed (name, email, subject, message). We use this only to reply to you and to keep a record of the request.
• Account data (only if you sign up). If you create an account, we store the email address and name you provided and a salted, hashed password. We do not store passwords in plain text.

We use Google Analytics 4 (GA4) to measure aggregate site usage — pageviews, where visitors enter the site, and which forms they submit. GA4 is configured with IP anonymization on, Google Signals off, and ad personalization signals off, so it does not feed an advertising profile. We do not run any other third-party analytics, advertising, or tracking pixels. We do not sell, rent, or share form submissions with fuel dealers or any other third party. If that ever changes, we will update this page before it does and describe the change.

Cookies

The site uses two kinds of cookies. The first is a NextAuth session JWT, set only after you sign in — it is HTTP-only, “secure” on production, and lets you stay signed in. The second is set by Google Analytics 4 when you load any page; it is a first-party identifier used to count visitors. We do not set advertising or fingerprinting cookies, and we do not link the GA4 identifier to your account or to any form submission.

How long we keep things

• Server logs: 30 days, unless we’re investigating abuse.
• Contact form submissions: kept while needed to resolve your inquiry; deleted on request (see below).
• Account data: retained while the account is active; deleted on request.

Third-party processors

We rely on a small number of vendors to run the site. They process data on our behalf:

• Vercel — web hosting and edge delivery. Sees request logs.
• Replit — development and preview environments. Sees request logs from preview deployments.
• Neon — managed PostgreSQL database. Stores account data and contact submissions.
• Google Analytics 4 — aggregate site usage measurement. Receives pageview events, the URL you visit, the referring URL, browser/device class, and a first-party GA4 identifier. Configured to anonymize IP and with Google Signals + ad personalization off.

Each of these vendors has its own privacy policy and security practices.

Children

The directory is not intended for children under 13 and we do not knowingly collect data from them.

Your choices

You can ask us to access, correct, or delete the personal data we hold about you. Email hello@fueldelivery.org from the address associated with the data and we’ll act on the request within 30 days. If you live in California, the EU, the UK, or another jurisdiction with statutory data rights, you have the rights granted by that jurisdiction; we honor those requests for everyone, not just residents of those places.

Changes

When we update this policy we’ll change the “Last updated” date at the top. Material changes will be noted in a banner on the site for at least 30 days.

Contact

Privacy questions or data requests: hello@fueldelivery.org or via the contact page.