Privacy & CIPA notice

The short version

California River Keepers collects personal information in one place only: the volunteer signup form, and only when you submit it. No analytics, session recording, chat widgets, or advertising technology runs without your explicit consent, managed through our consent platform. The detailed policy follows.

California Invasion of Privacy Act (CIPA)

California's Invasion of Privacy Act (Cal. Penal Code §630 et seq.) prohibits intercepting communications without consent. This site is built to comply in full:

• A consent management platform (Usercentrics) loads first on every page. Its autoblocker prevents any third-party technology from running until you have expressly consented, and you can change or withdraw consent at any time.
• No session-replay or screen-recording software, first- or third-party.
• No analytics scripts, advertising pixels, or fingerprinting without consent.
• No third-party chat widgets or embedded third-party forms.
• The volunteer form submits directly to our own server. We then transmit the information you provided — and nothing else — to our contact management system (HubSpot) over a server-to-server connection. HubSpot code never runs in your browser.
• Public pages set no tracking cookies. The consent manager stores your consent choices locally in your browser; a first-party authentication cookie is used only on the private administrator login used to log cleanup data.

What we collect and why

If you submit the volunteer form, we collect the name, email address, optional phone number, and interest area you provide. We use it solely to coordinate cleanup events and volunteer activities. We do not sell or share personal information, and we do not use it for advertising. Cleanup statistics published on this site (weights, sites, expenses) contain no personal information.

Volunteers under 18

Minors are welcome at cleanups with a parent or guardian. Our signup form requires a parent or legal guardian to submit on a minor's behalf and to provide consent. We do not knowingly collect information directly from anyone under 13.

Your rights

You may request access to, correction of, or deletion of your information at any time by emailing shanon@agency39a.com. We will honor deletion requests within 30 days. California residents may exercise rights under the CCPA/CPRA through the same contact.

Hosting & processors

The site is hosted on Vercel; cleanup statistics are stored in Supabase (PostgreSQL); volunteer contact information is stored in HubSpot; consent preferences are managed by Usercentrics. Standard server logs (IP address, request path) may be retained briefly by our hosting provider for security and reliability.