Privacy Policy

1. Introduction

City of Roses ("we," "us," or "our") operates cityofroses.com (the "Site"). This Privacy Policy explains what information we collect, how we use it, and your rights. By using the Site, you agree to this policy.

2. Information We Collect

We do not collect any personal information directly. However, third-party services integrated into the Site may collect limited information as described below:

• Google Fonts: The Site uses Google Fonts for typography. When you load a page, your browser requests font files from Google's servers, which may log your IP address, browser version, and referrer URL. Google's Privacy Policy governs this data.
• Unsplash: Itinerary images are served from Unsplash. Your browser requests these images from Unsplash's CDN, which may log your IP address and the page URL you're visiting. Unsplash's Privacy Policy governs this data.
• Cloudflare: The Site is hosted on Cloudflare Pages. Cloudflare processes HTTP requests as necessary to deliver the Site, which includes temporary logging of IP addresses for security and performance. Cloudflare's Privacy Policy governs this data.
• Leaflet / OpenStreetMap: Interactive maps load tiles from OpenStreetMap's tile servers, which may log your IP address. OpenStreetMap's privacy practices are governed by the OSMF Privacy Policy.
• Web3Forms: If you submit the contact form, your name, email address, and message are sent through Web3Forms for email delivery. Web3Forms' Privacy Policy governs this data. We store only the information you voluntarily provide.

3. Google Analytics

With your consent, we use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies and similar technologies to collect information about how visitors use the Site.

Specifically, Google Analytics may collect:

• Pages you visit and how long you spend on each page
• Referring website or campaign that brought you to the Site
• Your browser type, device type, and operating system
• Your IP address (which is anonymized — Google removes the last octet before storing it)
• General geographic location (city/country level only)

This information is used to analyze Site traffic, understand visitor behavior, and improve our content. Google may share this data under the terms of the Google Analytics Terms of Service and Google's Privacy Policy.

Google Analytics cookies set: _ga (client identifier, 2 years), _ga_<container-id> (session state, 2 years), _gid (session identifier, 24 hours), _gat (throttle request rate, 1 minute).

You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by clicking "Essential Only" in the cookie banner when you first visit the Site.

4. Cookies

We use the following types of cookies on the Site:

• Essential: A consent preference cookie (cookie_consent) to remember whether you accepted analytics tracking. This cookie does not track you across websites. Google Fonts and Unsplash CDN may also set essential cookies to deliver content.
• Analytics (consent-based): Google Analytics cookies (_ga, _gid, _gat) are only set if you click "Accept All" on the cookie banner. Without your consent, analytics cookies are never set.

You can disable cookies in your browser settings. Doing so may affect Site functionality (e.g., Google Fonts may fall back to system fonts).

5. How We Use Your Information

We use the information collected only to:

• Deliver the Site content to your browser
• Respond to contact form submissions (if you choose to contact us)
• Analyze aggregated, anonymized usage patterns (with consent) to improve the Site

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

6. Data Retention

Contact form submissions (name, email, message) are forwarded via email and may be retained by us for customer service purposes. You may request deletion at any time.

Google Analytics data is retained for 14 months, after which it is automatically deleted. Cloudflare edge server logs are retained for a short period for security analysis and then automatically deleted per Cloudflare's standard logging practices.

7. Your Rights (CCPA & GDPR)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to:

• Know what personal information is collected, used, or disclosed
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (we do not sell data)
• Non-discrimination for exercising your rights

If you are in the European Economic Area, the General Data Protection Regulation (GDPR) grants you similar rights, including the right to access, rectify, and erase your data. Our lawful basis for processing analytics data is your consent (Article 6(1)(a) GDPR).

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

The Site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Third-Party Links

The Site contains links to external websites (Google Maps, Apple Maps, event pages, tour bookings, etc.). We are not responsible for the privacy practices of these websites.

10. Changes to This Policy

We may update this Privacy Policy. Changes will be posted on this page with an updated "Last updated" date.

11. Contact

For questions about this Privacy Policy, contact:
Email: [email protected]