Privacy Policy

Last updated: April 1, 2026

RethinkDowntown.com (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable law, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the General Data Protection Regulation (GDPR).

1. Information We Collect

Automatically Collected Data

When you visit our site, we may automatically collect:

  • IP address and approximate location (country/city level)
  • Browser type and operating system
  • Pages visited and time spent on site
  • Referring website

This data is used solely to maintain and improve site performance.

Comments

If you leave a comment on our site, we collect your name, email address, and the content of your comment. Email addresses are never displayed publicly.

Contact Form

If you contact us via our contact form, we collect your name, email address, and message. We use this information only to respond to your inquiry.

Business Directory Submissions

If you submit a business listing to our directory, we collect the information you provide including business name, address, phone number, and any other details included in the submission.

2. Google Sign-In (OAuth)

Certain features on RethinkDowntown.com — including submitting a business listing to our directory and posting comments — require authentication via Google Sign-In.

When you sign in with Google, we receive the following information from your Google account:

  • Your name (as set in your Google profile)
  • Your email address
  • Your Google profile photo (avatar)
  • A unique Google account identifier

We do not receive your Google password or payment information. This information is used solely to identify you as the author of a comment or business submission, display your name and avatar next to your contributions, and allow you to edit or delete your own submissions.

We do not share your Google account data with third parties. Your email address is never displayed publicly on the site.

You may revoke our access to your Google account at any time by visiting myaccount.google.com/permissions. Revoking access does not automatically delete content you have previously submitted. To request deletion of your data, contact us here.

Google’s privacy policy applies to the authentication process: policies.google.com/privacy.

3. Analytics

We may use third-party analytics tools (such as Google Analytics) in the future to understand how visitors use our site. If and when such tools are implemented, this policy will be updated accordingly. Currently, no analytics tracking is active on this site.

4. Cookies

We use cookies to improve your experience on our site. These may include session cookies to keep you logged in during your visit, and functional cookies to remember your preferences. You can disable cookies in your browser settings at any time. Note that some site features (including Google Sign-In) may not function properly without cookies.

5. Maps and Geolocation

Our site uses interactive maps powered by Leaflet and OpenStreetMap. If you allow location access in your browser, your coordinates are used only to show your position on the map. This data is never stored on our servers. OpenStreetMap data is used under the Open Database License (ODbL).

6. Third-Party Links

Our site contains links to external websites including business websites, official museum pages, and other local resources. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

7. Data Storage and Security

We do not sell, trade, or rent your personal information to third parties. Any data collected is stored securely and retained only as long as necessary for the purposes described in this policy. We implement reasonable technical measures to protect your information from unauthorized access.

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know — request disclosure of what personal information we collect, use, and share about you.
  • Right to Delete — request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct — request correction of inaccurate personal information we hold about you.
  • Right to Opt-Out of Sale — we do not sell personal information. If this changes, we will update this policy and add an explicit opt-out link on our homepage.
  • Right to Non-Discrimination — we will not deny services or treat you differently for exercising your privacy rights.

To exercise any of the above rights, contact us here. We will respond to verified requests within 45 days as required by law.

9. Information for European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent local law may apply to our processing of your personal data.

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Legitimate interests — site security and performance monitoring
  • Contract performance — processing your business directory submission or responding to your contact form inquiry
  • Consent — where you have explicitly provided it (e.g., location access for maps)

Your GDPR Rights

As a European user, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us here. We will respond within 30 days as required under GDPR.

Data Transfers

RethinkDowntown.com is operated from the United States. If you are accessing our site from the EEA or UK, your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses and other appropriate safeguards where required.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, or as required by law. You may request deletion at any time by contacting us.

10. Other US State Privacy Rights

Residents of Nevada, Colorado, Virginia, Connecticut, Utah, and other US states with applicable privacy laws have similar rights to those described in Section 8, including the right to access, delete, and opt out of the sale of personal data. We do not sell personal data. To exercise your rights, contact us here.

11. Shine the Light (California Civil Code § 1798.83)

California residents may request information about personal data shared with third parties for direct marketing purposes during the prior calendar year. We do not share personal data for direct marketing purposes.

12. Children’s Privacy

This site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact

For any privacy-related questions, data requests, or to exercise your privacy rights under CCPA, GDPR, or other applicable law, please contact us here.