Privacy Policy

We may collect information that you voluntarily provide when you:

• Use our contact forms
• Apply for permits or licenses
• Register for events
• Subscribe to newsletters

This information may include your name, email address, phone number, mailing address, and any messages or comments you submit.

We use the information we collect to:

• Respond to your inquiries
• Process applications and permits
• Send event notifications and newsletters (with your consent)
• Improve our website and services
• Comply with legal obligations

This website sets only a small number of essential first-party cookies, and only for staff sign-in: when a staff member signs in to manage site content, a session cookie keeps them signed in, a short-lived cookie completes the sign-in process, and a preference cookie remembers if they have hidden the staff toolbar. Regular visitors are not given any cookies by this website, and we never use advertising, analytics, or third-party tracking cookies. Our visitor analytics are collected by our own first-party system without using cookies. Pages that accept card payments load the Square payment platform, which is governed by its own privacy policy (see Third-Party Services below). If your browser is set to refuse cookies, the public site works normally; cookies are only required for staff sign-in.

We may use third-party service providers for website hosting, email delivery, and payment processing. These providers have their own privacy policies governing their use of your information.

We implement reasonable security measures to protect your personal information. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

We use a first-party analytics system that we built ourselves to understand how residents and visitors use this site. We deliberately designed it to collect as little as possible:

• It sets no cookies, ever.
• No data is sent to third-party services or advertising networks.
• No personally identifying information (no email, no phone, no form values) is recorded in the analytics tables — only the fact that an interaction happened.
• Visitor sessions are recognized using a daily-rotating fingerprint hash that cannot be linked back to you and that we cannot use to re-identify you across days.
• If your browser sends the Do Not Track signal, we record nothing at all.
• Known bot and crawler traffic is filtered out before anything is stored.
• Raw analytics records are deleted automatically after 180 days; only anonymous daily totals are kept longer.