Privacy policy

• Account information. If you create an account: your email address, a password (stored as a hash by our authentication provider, never readable by us), your username, and an optional display name.
• Content you share. Pumpkin photos or videos you upload, plus their titles, descriptions, and tags, and your likes, star ratings, comments, saves, and reports.
• Email signups. If you join our newsletter or contest list: your email address, where on the site you signed up, how you first reached the site (the referring link or marketing campaign details, such as UTM tags), and your IP address and browser user-agent. We use these to send the emails you asked for, to understand which efforts bring people to the site, and to prevent abuse of the signup form.
• Technical basics. Standard server logs (IP address, request time, page requested) kept briefly for security and debugging.

We use Google Analytics and Google Tag Manager to understand site usage. Optional storage starts denied and follows your cookie-banner choice. Google scripts may send cookieless measurements even with storage denied. See the cookie policy for the configured consent categories and how to reset your choice. We do not buy personal data from other sources.

• To operate your account and show your uploads in the gallery.
• To moderate content (our moderators review submissions before they appear publicly).
• To send you the emails you signed up for, and nothing else.
• To keep the site secure, rate-limit abuse, and debug problems.

Approved uploads are public: the image or video, title, description, tags, and your username appear in the gallery and may be indexed by search engines. Your email address is never public. Comments and ratings are shown with your username.

We use a small number of service providers to run the site: hosting and a database/storage provider (Supabase). They process data on our behalf and don’t get to use it for their own purposes. We don’t sell or rent personal information. We would disclose information if legally required to.

• You can edit or delete your own uploads from your account.
• Every marketing email includes a way to unsubscribe, or just reply and ask.
• To delete your account and its data, email [email protected] from the account’s address and we’ll take care of it.

The site is family-friendly, but it isn’t directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we’ll remove it.

We keep account data while your account exists and email-list data until you unsubscribe. Server logs are short-lived. Data is stored with access controls, and passwords are hashed by our authentication provider. No internet service can promise perfect security, but we keep the surface area small.

The CCPA/CPRA details, including the categories we collect and how to exercise your rights to know, correct, and delete, live in our California privacy notice. The short version applies to everyone though: we don’t sell or share personal information, and you can ask us to delete yours at any time.

If this policy changes in a meaningful way, we’ll update the date at the top. Questions? Email [email protected] or write to us at PumpkinCarvingIdeas.com, 971 US Highway 202N #5239, Branchburg, NJ 08876.