Privacy Policy

Introduction

Maine Nugs (“we,” “our,” or “us”) operates the website at sustainable207.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or create an account. We are committed to protecting your privacy and complying with applicable data protection laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Maine's data privacy laws.

Information We Collect

Information You Provide

• Account Information: Display name, email address, county, and town when you create an account.
• Listing Information: Title, description, images, price, category, location, and SDG tags when you create a listing.
• Contact Information: Email and/or phone number you choose to share publicly on your listings.
• Volunteer Information: Vehicle type, service area, and availability when you register as a volunteer driver.
• Phone Numbers: Provided voluntarily during listing creation (with explicit opt-in consent), along with text/call communication preferences.

Information Collected Automatically

• Usage Data: Pages visited, time spent, features used, and general usage patterns.
• Device Information: Browser type, operating system, and screen resolution.
• Cookies: Essential cookies for authentication and optional analytics cookies (with your consent).

Phone Number Visibility

• Phone numbers are displayed only to signed-in members who have a Maine county set in their profile.
• Phone numbers are never sold, shared with third parties, or used for marketing purposes.
• Phone numbers are associated with individual listings and are not globally published.
• Users can remove their phone number by editing their listing at any time.
• When a listing expires or is deleted, the associated phone number is no longer visible to other users.

Cookies & Tracking

We use cookies to provide and improve our services. You can manage your cookie preferences at any time.

How We Use Your Information

• To provide, operate, and maintain the marketplace
• To authenticate you and protect your account
• To display your listings to other community members
• To connect buyers, sellers, and volunteer drivers in your area
• To calculate and display community impact statistics (anonymized and aggregated)
• To improve the site based on anonymized usage data
• To send important service communications (account confirmation, password resets)

Data Sharing & Third Parties

We do not sell, trade, or rent your personal information. We share data only with the following service providers who are necessary to operate the site:

• Supabase: Database and authentication provider (stores account data, listings, and session cookies)
• Vercel: Website hosting and deployment
• Google Fonts: Typography delivery (Playfair Display, Source Sans 3)

We will never share your information for advertising purposes. We may disclose information if required by law or to protect the rights, safety, or property of our users.

Data Retention

We retain your account data for as long as your account is active. Listings expire after 30 days and may be renewed. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it. Anonymized, aggregated data (such as community impact statistics) may be retained indefinitely.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data for certain purposes.
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent as the legal basis.

Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of the personal information we have collected from you.
• Right to Opt-Out of Sale: We do not sell your personal information. If this ever changes, you will have the right to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

We do not sell personal information as defined by the CCPA.

Maine Privacy Protections

Maine residents are protected under state privacy laws. We do not sell or share your internet browsing data. Internet service providers in Maine are restricted from using, disclosing, selling, or permitting access to your personal information without your express consent, and we hold ourselves to the same standard.

Children's Privacy

Maine Nugs is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can delete it promptly.

Data Security

We use industry-standard security measures to protect your personal information, including HTTPS encryption, secure authentication via Supabase (with magic link and password options), Row Level Security (RLS) policies on our database, and environment-variable management for sensitive credentials. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Do Not Track Signals

We honor Do Not Track (DNT) browser signals. If your browser sends a DNT signal, we will not place optional analytics cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “last updated” date. If changes are significant, we will also update the cookie consent version to re-prompt your preferences.

California Consumer Privacy Act (CCPA)

Maine Nugs does not sell, rent, or trade your personal information to third parties. We do not participate in data broker networks or cross-context behavioral advertising that would constitute a “sale” under the CCPA.

If you wish to opt out of advertising cookies (used by Google AdSense), you can do so at any time using the “Cookie Settings” link in the footer of any page.

For questions about your data rights under CCPA, including rights to know, delete, or opt out, please contact us via our support page.

Contact Us

To exercise any of your privacy rights, ask questions about this policy, or submit a data request, please contact us: