PRIVACY POLICY

INTRODUCTION

Taco States of America ("TSA", "we", "us", or "our") operates tacostatesofamerica.com. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and services.

INFORMATION WE COLLECT

Information You Provide

• Account information (email address, display name, state of residence)
• Shop nominations and reviews
• Photos you upload
• Ratings and votes
• Payment information (processed by Stripe)

Automatically Collected Information

• Device and browser information
• IP address and location data
• Usage data and analytics (via Google Analytics)
• Cookies and similar tracking technologies

HOW WE USE YOUR INFORMATION

• To provide and maintain our services
• To process your ratings, reviews, and nominations
• To calculate shop rankings and leaderboards
• To send transactional emails (account notifications, shop owner alerts)
• To process payments and donations
• To improve our website and user experience
• To prevent fraud and abuse

THIRD-PARTY SERVICES

We use the following third-party services:

• Supabase - Database and authentication
• Stripe - Payment processing
• Google Analytics - Website analytics
• Brevo - Transactional emails
• Vercel - Hosting

Each service has its own privacy policy governing how they handle your data.

COOKIES

We use cookies for:

• Essential cookies - Authentication and security (required)
• Analytics cookies - Google Analytics to understand site usage

You can manage cookie preferences through our cookie banner or your browser settings.

YOUR RIGHTS

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Object to processing of your data
• Export your data
• Withdraw consent at any time

To exercise these rights, contact us at [EMAIL].

DATA RETENTION

We retain your information as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information within 30 days, except where required by law.

CHILDREN'S PRIVACY

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy with an updated "Last Updated" date.

CONTACT US

If you have questions about this Privacy Policy, contact us at:
[EMAIL ADDRESS]