Privacy Policy | MCFRLive

1. Introduction

MCFRLive ("we," "us," or "our") operates the website mcfrlive.com (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service. MCFRLive is an independent project and is not affiliated with Martin County government, Martin County Fire Rescue, or any government agency.

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: When you create an account, we collect your email address. We use passwordless authentication via email verification links, so we do not store passwords.
Payment Information: If you subscribe to MCFRLive Pro, payment processing is handled entirely by Stripe, Inc. We do not receive, store, or have access to your full credit card number, debit card number, or bank account details. We receive only a transaction confirmation, subscription status, and the last four digits of your payment method for display purposes.
Communications: If you contact us directly, we may receive your name, email address, and the contents of your message.

2.2 Information Collected Automatically

Usage Data: We collect standard server log information including your IP address, browser type and version, the pages you visit on our Service, the time and date of your visit, time spent on pages, and other diagnostic data.
Push Notification Subscription: If you opt in to push notifications, we store the push subscription endpoint and associated keys necessary to deliver notifications to your device. You can revoke this permission at any time through your browser settings or your account notification preferences.
Location Information: If you grant permission, we may access your approximate geographic location to provide location-relevant incident data and alerts. Location access is entirely optional and is only used when explicitly permitted by you through your browser's location permission prompt. We do not store your precise location on our servers.
Device Information: We may collect information about the device you use to access the Service, including device type, operating system, and browser type, for the purpose of optimizing the user experience.

2.3 Information We Do Not Collect

We do not use third-party tracking cookies, advertising pixels, or cross-site tracking technologies. We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not collect biometric data, social security numbers, or government-issued identification numbers.

3. How We Use Your Information

We use the information we collect for the following purposes:

Account Management: To create and manage your user account, authenticate your identity, and provide account-related communications.
Service Delivery: To operate, maintain, and improve the Service, including delivering incident data, alerts, and notifications you have opted in to receive.
Subscription Management: To process and manage your Pro subscription, including billing and renewal.
Communications: To send you service-related communications such as account verification emails, subscription confirmations, and important service updates.
Service Improvement: To analyze usage patterns and trends to improve the performance, functionality, and reliability of the Service.
Security: To detect, prevent, and address technical issues, fraud, and abuse of the Service.
Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. Cookies and Local Storage

We use a limited number of cookies and local storage mechanisms that are essential to the operation of the Service:

Session Cookies: We use session cookies managed by NextAuth.js for user authentication. These cookies are essential for maintaining your logged-in state and cannot be disabled while using account features.
Theme Preference: We store your dark/light mode preference in your browser's local storage. This data never leaves your device.

We do not use advertising cookies, analytics tracking cookies, or any third-party cookies for behavioral tracking. For more information, please see our Cookie Policy.

5. Third-Party Services

We use the following third-party services in the operation of the Service. Each of these services has its own privacy policy governing its use of data:

Stripe, Inc. Payment processing for Pro subscriptions. Stripe collects and processes payment information in accordance with its own privacy policy. We do not have access to your full payment details. See: stripe.com/privacy
Resend. Transactional email delivery for account verification and notifications. Email addresses are shared with Resend solely for the purpose of delivering emails on our behalf. See: resend.com/legal/privacy-policy
National Weather Service (NWS). Weather data and alerts. Requests to the NWS API may include approximate location coordinates if you have opted in to location services. NWS is a U.S. government service and its data is in the public domain.
OpenStreetMap. Map tiles and geocoding. When you view maps on the Service, your browser makes requests directly to OpenStreetMap tile servers, which may log your IP address. See: OpenStreetMap Foundation Privacy Policy

6. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy:

Account Data: Your email address and account preferences are retained for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law.
Push Notification Subscriptions: Retained until you unsubscribe or revoke push notification permission.
Payment Records: Transaction records are retained as required for accounting, tax, and legal compliance purposes, typically for a period of seven (7) years.
Server Logs: Automatically deleted after 90 days.

Dispatch incident data displayed on the Service is derived from public records and is retained indefinitely as part of the public archive. This data does not contain personal user information.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit via TLS/HTTPS, secure session management, and restricted access to personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take reasonable steps to delete that information as promptly as possible. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so that we can take appropriate action.

9. Your Rights and Choices

Account Deletion: You may delete your account at any time through your account settings. This will remove your email address and account preferences from our systems.
Push Notifications: You can opt out of push notifications at any time through your browser settings or your account notification preferences.
Location Access: You can revoke location permission at any time through your browser settings.
Email Communications: You may opt out of non-essential email communications by following the unsubscribe instructions in any email we send, or by updating your account notification preferences.

10. California Residents: CCPA Notice

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom it is shared.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions permitted by law.
Right to Opt-Out of Sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.

To exercise any of these rights, please contact us using the information provided in Section 13 below. We will verify your identity before processing your request. We will respond to verifiable requests within 45 days as required by law.

Categories of personal information collected in the preceding 12 months: Identifiers (email address, IP address), commercial information (subscription status), internet or electronic network activity information (usage data, browser type), and geolocation data (approximate location, only if you opt in).

11. International Users

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer, storage, and processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last updated" date at the top. If you have an account, we may also notify you of material changes via email. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Website: mcfrlive.com