Privacy Policy for Ilovefdl.com

Effective Date: May 5, 2026

I Love Local LLC (“we,” “our,” “us”), based in Fond du Lac, Wisconsin, respects your privacy. This Policy explains what we collect, how we use it, and the choices you have.

1. Marketplace Disclosure

Ilovefdl.com is a multi-vendor marketplace. When you place an order, your contact and shipping details are shared with the relevant Vendor so they can fulfill the order. Each Vendor is independently responsible for how they handle that information once it leaves the Platform; we recommend reviewing the individual Vendor's storefront for any contact details before purchasing.

2. Information We Collect

Information you give us directly:

• Name, email, phone number
• Billing and shipping address
• Account credentials (password is hashed using bcrypt; we never see the plaintext)
• Newsletter subscription preferences
• Comments, reviews, or other content you post
• A map location, if you add one to a community event you submit. You can place the pin by clicking the map, searching an address, or tapping “use my current location” — the last of those reads your device’s position, and your browser will ask permission first. However it is set, the pin is published on the public events page, so don’t pin a private home unless you mean to share that address.
• Vendor onboarding information (storefront name, description, banking details collected by Stripe Connect)

Information collected automatically:

• IP address, browser type, device type, operating system
• Pages viewed, page load times, and the referring URL
• Cookies and similar technologies (see Section 7)
• When a page shows a map, your browser requests the map images directly from OpenStreetMap, which means your IP address and the area of the map you are looking at reach them rather than us. See Section 4.
• A push notification token for your browser or device, but only if you allow notifications when asked. It identifies the browser, not you, and declining means none is created.

Information collected from third parties:

• Stripe shares the last 4 digits and brand of your card, billing ZIP, and dispute / refund status — never the full card number
• Vendor inventory integrations (Shopify, Square, WooCommerce) provide product and order data tied to the Vendor, not to you personally

3. How We Use Your Information

We use your information to:

• Process orders, payments, refunds, and disputes
• Share order details with the relevant Vendor for fulfillment
• Send transactional email (order confirmations, refund notifications, password resets)
• Send marketing email if you've opted in to the newsletter (you can unsubscribe at any time)
• Improve site performance, security, and user experience
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations (tax records, subpoenas, etc.)

4. Sharing of Information

We share information with:

We do not sell your personal information.

5. Vendor Data Practices

When you place an order, your name, contact info, shipping address, and the contents of your order are made available to the Vendor fulfilling it. Each Vendor is independently responsible for how they store and use that information. Claims related to a Vendor's misuse of your data must be addressed directly with that Vendor; the Platform is not liable for Vendor data practices.

6. Data Security

We use industry-standard practices to protect your data:

• HTTPS/TLS for all traffic
• Bcrypt password hashing
• Encrypted secrets (signing secrets, OAuth tokens) at rest in our database
• Stripe-tokenized payment details — full card numbers never reach our servers
• Per-vendor data scoping so one Vendor cannot read another Vendor's orders or customer information

No system is perfectly secure, and you use the Platform at your own risk.

Wisconsin breach notification. In the event of a security breach involving the unauthorized acquisition of personal information of a Wisconsin resident, we will notify affected individuals as required by Wisconsin Statute § 134.98, generally within 45 days of discovery, by email or written notice. Where the breach affects more than 1,000 individuals, we will also notify the major consumer-reporting agencies. Notice may be delayed if law enforcement requests delay for the integrity of an investigation.

7. Cookies & Tracking

We deliberately keep this short. I Love FDL sets no advertising cookies, runs no session recording, and does not track you across other websites. There is no consent banner on this site because there is nothing to consent to.

• Essential cookies for authentication (NextAuth session) and shopping cart state — these cannot be disabled without breaking sign-in and checkout
• Cookieless analytics (Vercel Web Analytics and Speed Insights) for aggregated page views and load times. These set no cookies and store no identifier that follows you between visits or between sites.
• Push notifications (OneSignal), only if you explicitly allow them when your browser asks. Declining, or never being asked, means nothing is stored. You can revoke this at any time in your browser or device settings.

We previously used Google Analytics and Microsoft Clarity. Both have been removed from the site — Clarity recorded on-screen sessions, which we decided was more information than we need in order to run a local marketplace.

8. Your Rights

Wherever you live, you can ask us to do all of the following and we will — we don’t gate these on which state you’re in:

• See what we hold about you, and get a copy in a portable format.
• Correct anything wrong. Most of it you can fix yourself from your account pages; email us for the rest.
• Delete your account and its data. See the limits in Section 9 — some transaction records have to be kept for tax purposes, and we’ll tell you which.
• Stop marketing email — the unsubscribe link in any newsletter, or the /unsubscribe page. This is instant and doesn’t need us.
• Not be discriminated against for asking. Using any of these rights will not get your account restricted or your listing treated differently.

How to ask: email info@ilovefdl.com. We may need to confirm you are who you say you are before acting — usually by replying from the address on the account.

How long we take: we aim to reply within 45 days. If a request is genuinely complicated we may take longer, and if so we will tell you before that deadline rather than after it.

If we say no: we’ll explain why, and you can appeal by replying to that email with the word “appeal” — a second look by a person who didn’t make the first decision. If you’re still unhappy, your state attorney general’s office takes complaints about privacy requests.

We do not sell your personal information, and we don’t share it for cross-context behavioural advertising. There is no advertising network on this site and nothing to opt out of — see Section 7.

9. Data Retention

We’d rather be plain about this than vague: we keep your data for as long as you have an account. There is no automatic expiry that quietly deletes old activity, and we’re not going to claim otherwise.

What that means in practice:

• While your account is open — your profile, orders, messages, saved events and clipped coupons stay as they are, because they’re what the account is for.
• When you ask us to delete — we delete the account and the content attached to it, including uploaded images. This is done by a person, not a background job, which is why it takes days rather than seconds.
• What survives deletion, and why — order and payment records are kept for roughly seven years for tax and accounting purposes, and our audit log keeps a record of administrative actions. These are unlinked from your profile where possible, but we can’t destroy them on request.
• Newsletter unsubscribes — we keep your email on a suppression list after you unsubscribe. That sounds backwards, and it’s the only way to be sure we never mail you again.

10. Children's Privacy

I Love FDL is a general-audience local marketplace and news site. It is not directed at children under 13, and we do not knowingly collect their personal information.

We do not ask your age when you register, so we have no way to verify it. We rely instead on the site not being aimed at children and on the fact that buying, selling, advertising and claiming prizes all require things a child wouldn’t have. Anything involving payment, a vendor or advertiser account, or a prize is for adults — 18 or older.

If you believe a child under 13 has given us personal information, email info@ilovefdl.com and we will delete the account and its content. You don’t need to prove anything to us first.

11. International Users

The Platform is hosted in the United States. By using the Platform from outside the U.S., you consent to your data being transferred to and processed in the U.S.

One exception runs the other way: the map images described in Section 4 are served by the OpenStreetMap Foundation, which is based in the United Kingdom, so loading a page with a map sends your IP address outside the U.S. Nothing else on this site does.

12. Changes to This Policy

We may update this Policy from time to time. The “Effective Date” at the top will reflect the most recent revision. Material changes will be communicated by email or a site notice.

13. Contact

I Love Local LLC
Fond du Lac, Wisconsin
Email: info@ilovefdl.com
Website: https://ilovefdl.com