Privacy notes
A spooky map, not a surveillance map.
Halloween Displays helps people enjoy displays without turning a front yard into a public address directory. This policy explains what we store, why, and how to request changes. It is a plain-language summary; it does not replace applicable law.
Effective 20 October 2026.
Addresses are approximate by default
A submission stores an exact coordinate for moderation, but the public map receives a separate persisted approximate point roughly 120–320 metres away. Public APIs do not return the exact address. An exact home address requires the homeowner to verify ownership; public events may opt into an exact entrance.
Photos
Photos upload directly to a private object-storage bucket using short-lived links. The API verifies the stored object, the image worker re-encodes every photo to WebP and strips EXIF/GPS metadata, and a moderator approves each image before it is served through a short-lived signed URL. Do not upload people who have not consented.
Accounts, reports, and retention
- Passwords are stored as bcrypt hashes, never in plain text or logs.
- Access tokens are short-lived and held only in memory. Refresh tokens are rotated, hashed in the database, and stored in an HttpOnly cookie.
- Report history is retained while the account remains active for moderation audit.
- You can request correction or deletion of a listing or account by emailing the contact below; abuse and privacy flags are prioritised.
- IP addresses and user agents are stored only with refresh sessions for security.
Cookies and third parties
We use an HttpOnly session cookie and a language cookie. Cloudflare Turnstile protects registration and reports; Cloudflare may process technical verification data. Resend delivers transactional email. Supabase hosts the database and Cloudflare R2 stores images. We do not sell personal data or use behavioural advertising.
Your choices
You can update your details, change email notifications, remove your photos, or ask us to close your account. Email us and we will respond within a reasonable period. If a display is yours, claim the listing to control hours, photos, and temporary closures.
Report a concern
Use the safety link on a display to flag inaccurate information, privacy concerns, or unsafe content. Moderators can unpublish a display immediately. For urgent safety issues, contact local authorities first.
Privacy contact: hello@friendlycityprintshop.com
Read the Terms of use or return to the map.