Privacy policy

Who runs this site

Krambach.au is a community-run site for the village of Krambach, NSW. It's not a business, and it doesn't sell anything. If you have any questions about how your information is handled, contact us at [email protected].

What we collect

We only collect what's needed to run the site:

• Account details: your name, email address and a password. Passwords are stored as a secure one-way hash; nobody, including site admins, can read your actual password.
• Content you submit: directory listings, comments, posts, and anything you send us via the contact page.
• Basic technical logs: standard web server logs (like IP address and browser type), kept briefly for security and troubleshooting, not used to track you personally.

Google Analytics is currently in use to understand overall visitor numbers and popular pages (see “Optional features” below). If that ever changes, this policy will be updated first.

How we use it

Your information is used to run your account, show your approved directory listings and comments publicly, moderate submissions, and respond if you contact us. We don't sell, rent or share your personal information with third parties for marketing purposes.

Cookies

The site uses a single essential cookie to keep you signed in. It doesn't track you across other websites and isn't used for advertising.

Our own visit statistics

Separately from any optional third-party analytics listed below, this site keeps a simple, self-hosted record of page visits so we can see which pages are actually useful to the community. This runs on our own server, always, and nothing about it is shared with Google, an advertiser, or anyone else.

For each visit to a real content page, we record:

• the page path you visited (for example /directory), never a full URL with query parameters
• a coarse device type (mobile, tablet, or desktop), not your browser or operating system
• the domain of the site that referred you here, if any (for example facebook.com), never the full referring link
• a rough, one-way visitor count: your IP address and browser details are combined with a secret value that changes every day and run through a one-way hash, so the same visitor can be counted once per day without that count ever being reversible back to an IP address, and without it working to identify or follow the same person from one day to the next

We deliberately don't:

• store your IP address or full browser (User-Agent) string in these statistics
• use this data for advertising, or share it with an advertiser or data broker
• track you across other websites
• attach any of this to your account, even if you're signed in

Records are kept for around 90 days and then automatically deleted. Only site admins can see this data, and only as aggregate counts (visit numbers and popular pages), not as a per-visitor log.

Features currently in use

This site has a few optional features. This list always reflects what's actually switched on right now, not just what might be added later:

• Sign in with Google: currently on. Google handles that part of the login and shares your name and email with us, under Google's own privacy policy.
• Cloudflare Turnstile: currently on. A spam-prevention check runs when you post a comment, listing or new account, provided by Cloudflare.
• Google Ads: currently off.
• Google Analytics: currently on, as an additional, external analytics tool alongside our own visit statistics described above. It's provided by Google, runs in your browser, and is covered by Google's own privacy policy, not just ours.

Marketing emails

If you tick the marketing box when signing up, or turn it on later in your account settings, we may email you about news posts, new directory listings or upcoming events, depending on what you've opted into. You can turn this off at any time from your account settings, or use the unsubscribe link in any email. We won't send marketing emails unless you've explicitly opted in.

Where your data lives

Site data is stored on a server we manage directly, not handed off to a third-party data broker. Reasonable technical precautions are taken to keep it secure, but no system is completely immune to risk, and we can't guarantee absolute security.

Your rights

You can ask us to show you what information we hold about you, correct it, or delete your account and associated data. Get in touch via the contact page and we'll sort it out, usually within a few days. Some information (like content already publicly posted) may need to be removed separately from your account.

Children

This site isn't designed for children. Accounts are meant for adults and older teens managing their own or a family business's directory listing.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page and, where practical, mention it on the news page.