Privacy Policy

1. Who we are

FairLot operates at fairlot.org. We build and maintain the FairLot lot rent database, which is an independent source of mobile home park lot rent data for Vermont and Nevada.

We are not affiliated with any park operator, management company, or industry association. If you have questions about this policy, contact us at [email protected].

2. What data we collect

When you sign in with Google

We use Google Sign-In for authentication. When you sign in, Google sends us your name and email address. We store both in our database to identify your account. We do not receive your Google password, phone number, or any other Google account data beyond name and email.

When you submit a lot rent

When you submit a lot rent through the resident tool, we collect:

• The park you selected
• Your reported monthly lot rent amount
• Optional fields you choose to fill in: whether utilities are included and whether the park has an age restriction
• An optional free-text note you choose to write
• Your IP address (stored internally for fraud prevention, not shared publicly)
• The date and time of the submission

You do not need to be signed in to submit a lot rent. We do not ask for your name, address, lot number, or any information that directly identifies you in a submission.

When you use the investor dashboard

If you subscribe to a paid plan, we collect your email address (via Google Sign-In) and process your payment through Stripe. Stripe handles all payment card data directly; we never see or store your card number.

Automatically collected data

Like most web services, we automatically collect:

• IP addresses (used for rate limiting, fraud detection, and approximate location like country/state)
• Browser type and version
• Operating system
• Pages visited, time on page, and navigation paths
• Errors that occur while using the service
• Referring URL (what site linked you here, if any)

3. How we use the data

• Providing the service: Your account information lets you sign in and manage your subscription. Your lot rent submission becomes part of the aggregated park-level dataset.
• Improving data accuracy: We use multiple submissions from the same park to build higher-confidence estimates of current lot rents. More submissions from a park improve the accuracy of the data shown.
• Fraud and abuse prevention: IP addresses help us detect duplicate submissions and block bot activity.
• Billing: We pass your email address to Stripe to manage your subscription and send you receipts.
• Service improvements: Analytics data helps us understand which features are used and fix bugs.
• Communicating with you: We may send you transactional emails (receipts, account notices) and, if you opt in, product updates. We do not send marketing email to residents who have not paid for a subscription.

4. What we share

We do not sell your personal data. We share data only in the following cases:

Aggregated, anonymous park data

The core product is park-level lot rent statistics: median, average, range, and source confidence for each park. This data is derived from many submissions and publicly available sources. It is never linked to individual submitters or their names.

Stripe (payment processing)

When you subscribe to a paid plan, we share your email address with Stripe to set up your billing account. Stripe processes all payment transactions. Stripe's privacy policy is at stripe.com/privacy.

Legal requirements

We may disclose information if required to do so by law, court order, or other governmental authority. We will notify you of any such request if we are legally permitted to do so.

Business transfers

If FairLot is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify users before that happens and before your data becomes subject to a different privacy policy.

5. Cookies and session data

Authentication cookie

When you sign in, we set a cookie that contains a JWT (JSON Web Token). This cookie is how we keep you logged in between page loads. It contains your user ID and subscription plan level. It does not contain sensitive personal information and is not shared with third parties.

Cloudflare Turnstile

The resident submission form uses Cloudflare Turnstile for bot protection. Turnstile may set cookies or use browser signals to verify that you are a human. Cloudflare's privacy policy is at cloudflare.com/privacypolicy.

We do not use advertising cookies, tracking pixels, or any third-party analytics cookies that follow you across other websites.

6. Analytics and session recording

We use OpenObserve, a self-hosted analytics platform, to collect usage data. OpenObserve runs on our own infrastructure, meaning your data does not go to a third-party analytics company.

What we track:

• Page views and navigation paths
• JavaScript errors
• General performance metrics (page load time, etc.)
• Session replays (recordings of mouse movement and clicks to help us diagnose UX issues)

Session replays use input masking: any text you type into form fields is masked before it is recorded. We see that you typed something, but not what you typed.

If you prefer not to be tracked by session replay, you can disable JavaScript in your browser or use a browser extension that blocks script-based tracking. Basic page functionality does not require JavaScript.

7. Data retention

• Lot rent submissions: Kept indefinitely as part of the historical dataset. Historical data helps us understand rent trends over time.
• Account information (name and email): Kept for as long as your account exists. If you delete your account, your name and email are deleted within 30 days.
• IP addresses on submissions: Stored in a notes field on the submission record for fraud detection. We do not use them for any other purpose.
• Session replay and analytics data: Retained for 90 days on our OpenObserve instance, then automatically deleted.
• Billing records: Stripe retains payment records per their policies and applicable law. We retain records of subscription periods for accounting purposes.

8. Your rights

You have the following rights regarding your data:

• Delete your account: Email us at [email protected] and we will delete your account and associated personal information within 30 days. Aggregated, anonymized lot rent data derived from your submissions may remain as part of the park-level dataset.
• Export your data: You can request a copy of the data we hold about you. Email us and we will send it within 30 days.
• Correct your data: If your name or email on file is incorrect, email us and we will fix it.
• Opt out of session recording: Disable JavaScript or use a script-blocking browser extension. We do not have a cookie-based opt-out for session recording at this time.

9. Children

FairLot is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

10. California residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you certain rights:

• Right to know: You can request that we disclose what personal information we collect, use, and share about you.
• Right to delete: You can request that we delete your personal information, subject to certain exceptions.
• Right to opt out of sale: We do not sell personal information, so there is nothing to opt out of here.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email [email protected] with "CCPA Request" in the subject line. We will respond within 45 days.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We will not reduce your privacy rights without giving you notice first. If you continue to use FairLot after changes take effect, that means you accept the updated policy. Check back here if you want to know the current version.

12. Contact us

If you have questions, requests, or complaints about how we handle your data, email us at:

[email protected]

We aim to respond within 5 business days.