Privacy Policy

1. Introduction

QueerLine ("we," "our," or "us") operates queerline.com, a nationwide LGBTQ+ community and resource platform. We are committed to protecting the privacy of everyone who visits or uses this platform. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have regarding your data.

By using QueerLine, you agree to the collection and use of information as described in this policy.

2. Information We Collect

Account Information

When you register, we collect your username, email address, and a securely hashed password. You may optionally provide a display name, pronouns, city, and state. We do not collect your Social Security number, government ID, or payment card numbers directly.

Usage Data

We collect standard server log data including your IP address, browser type and version, pages visited, referring URLs, and timestamps. This data is used for security monitoring, abuse prevention, and platform improvement. Log data is retained for up to 90 days.

Content You Post

Forum posts, reviews, event submissions, business listings, and Family Building Network profiles you create are stored on our servers and visible to other users as intended by those features.

Payment Information

Business listing payments are processed by Stripe, Inc. We do not store your payment card details. We receive only a payment confirmation token. Stripe's privacy policy governs all data collected during payment processing.

Consent Records

When you create an account, we record your acceptance of our Terms of Service and Privacy Policy, including your account ID, IP address, browser information, and the date and time of your consent. If you create a Family Building Network profile, your acceptance of that section's separate member agreement is also logged. These records exist for legal compliance purposes and are not shared with third parties.

Communications

If you contact us via our contact form or email, we retain your message to respond to your inquiry and improve our services.

3. How We Use Your Information

• To provide, operate, and maintain the QueerLine platform
• To authenticate your account and maintain its security
• To send transactional emails, including account verification, password reset, and receipt confirmations
• To moderate content and enforce our Terms of Service
• To investigate abuse, security incidents, and platform integrity issues
• To maintain legally required records of consent
• To improve the platform based on usage patterns
• To respond to your support requests and inquiries

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Cookies and Local Storage

QueerLine uses a single session cookie to keep you logged in while you browse. This cookie contains only a session identifier and no personal information. We do not use third-party tracking cookies or advertising cookies.

We may use browser local storage for non-personal UI preferences, such as filter state on search pages. This data stays on your device and is not transmitted to our servers.

5. Third-Party Services

We integrate the following third-party services. Each operates under its own privacy policy that governs data when you interact with it.

• Stripe: Payment processing for business listing fees. Stripe receives your payment card information directly. We receive only a confirmation token. Stripe's privacy policy applies to all payment data.
• Google Maps: Used to display resource locations and business addresses. When map tiles load, Google receives your IP address. Google's privacy policy applies.
• Cloudflare Turnstile: CAPTCHA verification used on all public forms, including registration, login, contact, and event submission. Cloudflare's privacy policy applies when a CAPTCHA challenge loads.
• Google Fonts and Tabler Icons CDN: Font and icon files served from external CDNs. Standard CDN request logging (IP address, browser type) may apply.
• Email Delivery (Hosting Provider SMTP): Transactional emails (account verification, password reset, notifications) are sent through our web hosting provider's secure SMTP mail servers. Your email address and the message content are processed by those servers solely to deliver the email to you. We do not use a third-party bulk email marketing platform.
• CDC National Prevention Information Network (NPIN): Provider data for the HIV and sexual health services locator is sourced from this federal CDC database. Searches are performed server-side on your behalf. Your personal information is not shared with NPIN.
• Eventbrite and RSS News Sources: Events and news content may be aggregated from Eventbrite or public RSS feeds from verified LGBTQ+ news outlets. This aggregation is performed server-side and does not share your information with those sources.

6. Data Retention

Account data is retained for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except where retention is required by law or necessary to resolve outstanding disputes. Forum posts and reviews may be anonymized rather than deleted to preserve community continuity. Consent records are retained for a minimum of 5 years for legal compliance purposes. Server log data is retained for up to 90 days.

7. Security

We implement industry-standard security practices including bcrypt password hashing, HTTPS enforcement across the entire site, CSRF protection on all forms, CAPTCHA verification to prevent automated abuse, and parameterized SQL queries to prevent injection attacks. Session cookies are configured with HttpOnly, Secure, and SameSite attributes.

No system can guarantee absolute security. In the event of a data breach that is reasonably likely to result in harm to your personal information, we will notify affected users as required by applicable law and notify relevant regulatory authorities where required.

8. Minimum Age and Children's Privacy

QueerLine requires users to be at least 18 years of age to create an account. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected information from a person under 18, we will delete it promptly.

Informational content on the site, including health resources, crisis support, and community education pages, is publicly accessible without an account and is available to visitors of any age.

9. Your Rights and Choices

You may request access to, correction of, or deletion of your personal data by contacting us through our contact page. We will respond within 30 days.

You may update most of your profile information directly from your account settings at any time.

You may opt out of non-transactional email communications at any time by using the unsubscribe link in any email we send, or by contacting us. Transactional emails (account verification, password reset) cannot be disabled while your account is active, as they are required for account security.

You may request account deletion by contacting us. We will confirm deletion within 30 days.

10. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You may request a list of the categories and specific pieces of personal information we have collected about you and how we use it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions required by law.
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Right to Opt Out of Sale: We do not sell personal information. No opt-out is required, but you have this right by law.

To exercise any of these rights, contact us through our contact page. We will verify your identity before processing your request and respond within 45 days as required by law.

11. Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Texas, Utah, and other states with comprehensive consumer privacy laws may have rights similar to those described in Section 10, including rights to access, correct, delete, and obtain a portable copy of their personal information. To exercise any such rights, please contact us through our contact page.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date. For material changes, we will make reasonable efforts to notify registered users by email. Continued use of QueerLine after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us. We will do our best to respond within 5 business days.