Privacy Policy

Introduction

BurnBound ("we," "us," or "our") operates the website at burnbound.io. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

BurnBound is a free public safety tool that aggregates fire restriction data from public government sources. We are committed to collecting as little personal data as possible while providing a useful service.

Please note: The fire restriction data displayed on this site may not be accurate, complete, or current. Data is aggregated from public sources and may lag behind official agency updates. Always verify fire restriction status with official sources before making any fire-related decisions. See our Terms of Service for full details.

Information We Collect

We collect the following categories of information:

• Page views: When you visit any page, we record the page path, a one-way anonymized visitor hash, your referrer URL, user-agent string, and approximate geographic location (city/region level, derived from your IP address at the time of the request). The visitor hash is generated using a SHA-256 hash of your IP address combined with a daily rotating salt. We never store your raw IP address. The hash cannot be reversed to recover your IP, and the daily salt means the same IP produces a different hash each day.
• Contact and report forms: If you submit feedback or report an issue, we store the message text, the page you submitted it from, and any jurisdiction information you selected. We do not require your name or email address for these submissions.
• Alert signups: The alert notification feature is currently disabled and collects no data. When the feature launches in the future, it will collect your email address (voluntarily provided) solely for fire restriction change notifications.

Consent & Opt-Out

By accepting the Terms of Service on your first visit, you consent to the collection of anonymized page view analytics as described in this policy. You may opt out of analytics tracking in the following ways:

• Global Privacy Control (GPC): If your browser sends a GPC signal (Sec-GPC: 1 or navigator.globalPrivacyControl), we honor it as a valid opt-out request.
• Contact opt-out: Email privacy@burnbound.io to request that your data be deleted or to opt out of future collection.
• Do not use the site: If you decline the Terms of Service, no analytics data is collected.

How We Use Your Information

• Page view data is used to understand aggregate traffic patterns — which pages are popular, how visitors find us, geographic distribution of users, and overall site usage trends. This helps us improve the service and demonstrate reach to potential sponsors.
• Feedback and report messages are used to identify bugs, improve data accuracy, and prioritize development work.

We do not sell, share, rent, or trade your information with any third party. We do not use your data for advertising, profiling, or automated decision-making.

What We Do NOT Do

• We do not store raw IP addresses — only a one-way hash with a daily rotating salt
• We do not use cookies of any kind
• We do not use third-party analytics services (no Google Analytics, no Meta Pixel, etc.)
• We do not use any third-party tracking scripts or advertising scripts
• We do not participate in any ad networks
• We do not sell, share, or trade any user data with third parties
• We do not engage in user profiling or automated decision-making
• We do not use cross-site tracking of any kind

Data Storage & Security

All data is stored on our own servers. We do not use third-party data processors for user information. We use standard security practices including encrypted connections (HTTPS), server access controls, parameterized database queries, and regular security updates to protect against unauthorized access.

Data Retention

• Page view data is retained indefinitely for aggregate traffic analysis. Because we do not store raw IP addresses, this data cannot be used to identify individual users after the daily salt rotates.
• Feedback and report messages are retained until they have been reviewed and addressed.
• Alert signup emails (when the feature is enabled) will be retained until you unsubscribe or request removal.

Your Rights

Depending on your state of residence, you may have some or all of the following rights regarding your personal information. We honor these requests regardless of where you live:

• Right to know / access: You may request a description of the personal information we hold about you.
• Right to correction: You may request correction of inaccurate personal information.
• Right to deletion: You may request deletion of your personal information.
• Right to opt out of sale: We do not sell personal information. There is nothing to opt out of.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

These rights are provided under the Colorado Privacy Act (CPA), the California Consumer Privacy Act (CCPA/CPRA), and similar privacy laws enacted in Virginia, Connecticut, Utah, Oregon, Texas, Montana, Iowa, Indiana, Tennessee, Delaware, New Hampshire, New Jersey, and other states.

To exercise any of these rights, contact us at privacy@burnbound.io. We will respond to verified requests within 45 days. Because our data collection is minimal and largely anonymized, in most cases there is no personally identifiable data to access, correct, or delete.

Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) signal as a valid opt-out of analytics tracking, as required by the Colorado Privacy Act and California Consumer Privacy Act. If your browser transmits a GPC signal, we treat it as a request to opt out of any data collection that could be considered a "sale" or "sharing" under applicable law. Since we do not sell or share data, the GPC signal is primarily honored as an analytics opt-out.

You can enable GPC in your browser settings or by installing a GPC-compatible browser extension. Learn more at globalprivacycontrol.org.

Children's Privacy

BurnBound is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@burnbound.io and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

privacy@burnbound.io

A physical mailing address (PO Box) will be added to this page once obtained.