ActaPack

Privacy

Privacy policy

Effective 11 September 2026. This policy describes what ActaPack actually collects on this host today, and what we will collect only when a named service exists.

Who we are

ActaPack is a monthly public-site accessibility evidence program. This website is operated by Peter Joles in Minneapolis, Minnesota, United States. A Minnesota limited liability company has not been formed yet. When it is, this policy will name that entity.

Contact: [email protected] (until [email protected] exists).

What this policy covers

This policy covers actapack.com and, when they exist, related ActaPack product surfaces (including a later clerk app). It is about our handling of personal information. It is not legal advice about your city’s Title II duties, and it is not a WCAG certification.

This site is not public yet. Notify fields on this draft are disabled. We do not store email, city, or hostname from that form. Sign in is a link to the clerk app. This marketing host does not collect a password or a login email.

Information we collect

On this unpublished draft. When you load a page, the host that serves it typically sees your IP address, browser type, and the page you requested. When this domain is served from Cloudflare Pages, Cloudflare processes that traffic. Type on this draft is IBM Plex Sans, served from this host. We do not load fonts from Google. We do not send Google your name or email. Advertising pixels are not installed. Google Tag Manager loads only if you allow optional third parties, and not when Global Privacy Control or Do Not Track is on.

When Notify is public. A first-party waitlist store is ready. If you ask to be notified, we collect the email address, city, town, or district name, and public website address you type, and we store those three fields to tell you when the program is open. This draft form is still disabled and does not send those fields. We do not sell them. We do not share them with Lokker. We do not add them to a Lokker list.

Public-directory research. We may copy a public official’s name, title, and email from a city’s public contact page into a private company ledger used to reach clerks about this program. That information is already published by the city. Waitlist addresses and inbound message bodies do not go in that ledger or in git.

If you later pay for ActaPack. We will collect the account email used to sign in (magic link or Google / Microsoft), the public hostname you add, and copies of public pages and public PDFs we fetch so we can send the monthly file. First look may open a few public pages and keep glance shots for 90 days. Optional later collection, only if you turn it on or send it to us: staff-page URLs you list; inbound mail to hello@ and published aliases (From, subject, body, attachments) when Google Workspace exists; pack-ready and opted-in alert mail; an optional webhook URL; an optional Web Push endpoint on your browser. We do not put passwords in the pack. We do not fetch student, employee, or other behind-login records unless a later written terms change says so.

We do not collect payment card numbers (Stripe would, if you pay) or passwords for city website logins. We do not sell city data.

Cookies and similar technologies

Cookies and similar technologies are small files or scripts that remember a choice or measure a visit. ActaPack does not need a separate cookies page. The categories, and how to change them, are here.

  • Necessary. Needed to show the page, keep it secure, and remember whether you allowed optional tools (the actapack-klaro cookie). Always on. Not a choice in the banner.
  • Optional third parties. One switch. Covers site analytics, performance tools, and marketing when those tools exist. Today that is Google Analytics 4 through Google Tag Manager, only after you allow optional tools. Advertising pixels (including Meta, LinkedIn, and TikTok) are not installed yet. Used to understand which pages are used, and later to measure visits from ads. We do not put your email or waitlist fields into those tools.

Cookie preferences in the footer opens a tool with one Accept optional and one Reject optional control, same visual weight. No nested categories. Optional third parties stay off in Minnesota and other places that require a prior choice, until you accept. In other places they may start on until you reject them. Allowing optional tools loads Google Tag Manager. Advertising pixels are not installed yet.

A later clerk app, if it exists, will use a session cookie only (HttpOnly, 30 days, Secure, SameSite=Lax). No advertising pixels on that app.

Global Privacy Control and Do Not Track

If your browser sends Global Privacy Control (GPC) or Do Not Track, we treat that as a refusal of optional third parties. Those technologies must not load. The signal does not stop a pack-ready email after you pay — that mail is the monthly file you bought.

We treat GPC as an opt-out of “sale” or “sharing” of personal information and of targeted advertising, as those words are used in US state privacy laws. We do not sell personal information for money.

How we use information

  • Operate, secure, and understand this website
  • Respond to Notify requests and email you send us
  • Provide the paid monthly file and tickets when you are a customer
  • Keep the dated pack for seven years and glance shots for 90 days
  • Measure the site or show advertising only if you allow optional third parties

How we share information

We use companies that process information for us. We name only vendors that exist or that this policy says will exist when that service is on:

  • Today: Cloudflare, when this domain is served from Cloudflare Pages.
  • When Notify or mail is live: Postmark for transactional email.
  • When you allow optional third parties: Google (Tag Manager and Analytics), and Meta, LinkedIn, or TikTok for the pixels you allowed.
  • Later, when those services exist: Stripe for payment; Google Workspace for inbound mail to hello@; Google Cloud and Neon for the product app.

Customer Slack or Teams addresses you give us for alerts are your destination, not ActaPack vendors. We do not share ActaPack data with Lokker. We do not sell city data. We may disclose information if the law requires it.

This policy is not a data processing agreement. If a district later needs one, that is a separate document.

How long we keep information

  • Notify fields: until you ask us to delete them, or we close the list without converting it
  • Paid packs: seven years
  • Glance screenshots: 90 days
  • Host logs: whatever the host (Cloudflare) retains for security and abuse
  • Public-directory ledger entries: until the outreach is finished or we delete them

Your choices and rights

You can email us to ask what we hold, to correct it, or to delete it. If you are a customer, you can also close the account. Depending on where you live — including Minnesota, California, and other US states with consumer privacy laws, and the European Economic Area or United Kingdom — you may have further rights to access, deletion, correction, and to opt out of targeted advertising. We honor GPC for that opt-out. We will not deny the service, charge a different price, or lower quality because you exercised a privacy right.

We do not claim that every US state privacy statute currently applies to us. We still honor deletion requests and GPC. To make a request, email [email protected]. We may need to verify it is you. If we decline, you may ask us to look again.

Children

This site is for city and township staff and their website vendors. It is not directed at children under 13, and we do not knowingly collect personal information from children.

Where information is processed

ActaPack is operated from the United States. If you visit from another country, your information is processed in the United States. Optional cookies for visitors in the EEA, United Kingdom, Switzerland, and US states that require a prior choice stay off until you accept them.

Changes

We will change this page when collection changes, and we will update the effective date. Material changes will be described on this page.

Contact

Privacy questions and requests: [email protected]. Operator: Peter Joles, Minneapolis, Minnesota, United States.

Counsel reviews this policy before we take payment or run paid advertising. Until then, treat the “today” paragraphs as the current collection on this unpublished host.