Privacy Policy

Last updated · April 27, 2026

Summary

Ohio Parcel Downloader (the "Service") is operated by an independent developer. This page explains, in plain English, what data we collect, why, and what we do with it. The short version: we collect the minimum needed to run the tool and the subscription, we never sell or share it, and you can ask us to delete it at any time.

What we collect

For everyone (free tier):

• A signed cookie called free_used that records how many free downloads you've taken (0–3). It contains no personal information.
• Standard server logs: timestamp, IP address, request path, and user agent. These are kept short-term for security and abuse prevention.

For signed-in subscribers:

• Your Google account identifier (sub) and email address. We receive these when you sign in with Google. We use the email to identify your account and to let Stripe email you receipts. We do not have your Google password.
• A signed session cookie that keeps you logged in.

For paying subscribers:

• A Stripe customer ID, subscription ID, status, and current period end date. We do not store your card number, CVV, or full billing details — those live with Stripe under their PCI-compliant infrastructure.

What we do not collect

• We do not sell or share your data with advertisers.
• We do not run third-party trackers beyond Google Analytics (page views) and Google AdSense (page-level ads). Both are configured per their standard setups; you can opt out using browser-level controls or extensions.
• We do not collect parcel data tied to your account. Bounding boxes you draw are processed in-memory to fetch the data and are not stored.

Cookies

• free_used — tracks the free-tier counter. Signed; expires after 1 year.
• oauth_flow — short-lived (10 min) cookie used during the Google sign-in round-trip.
• sess_v2 — your logged-in session cookie. Signed; expires after 30 days.
• _ga, AdSense cookies — set by Google for analytics and ads.

Third parties

The Service uses these third-party providers, each with their own privacy policies:

• Google for sign-in and Analytics
• Stripe for subscription billing
• Railway as the hosting provider
• Cloudflare as the CDN
• Ohio Department of Natural Resources as the public source of parcel data

Your rights

You can:

• Cancel your subscription at any time from the Manage subscription link, which opens Stripe's customer portal.
• Sign out at any time, which clears your session cookie.
• Email us to request that we delete your account and any associated subscription record. Contact: [email protected].

Data retention

• Free-tier cookies clear when you clear your browser's cookies.
• Account records are retained while your subscription is active and for up to 90 days after cancellation, then deleted.
• Stripe retains its own records per their compliance requirements.

Changes

If we update this policy in a way that affects your data, we'll update the "last updated" date at the top of this page and, where appropriate, notify you by email.

Contact

Questions, deletion requests, anything else: [email protected].