Privacy Policy

The short version

All Things BLACK is a program of VERB Community. We collect the minimum needed to run a community resource directory. We never sell your information. We never show you ads. Only community stewards can see anything beyond what you choose to make public.

What we collect

If you browse the site by searching the directory, viewing the calendar, reading reports, or viewing the map, we collect nothing beyond what is needed to load the page. No account is required to browse, and no advertising trackers or analytics pixels run on this site. Our hosting provider keeps standard technical logs (such as your IP address, browser type, and the pages requested) for security and reliability.

If you submit a resource, event, or report, we collect your name and email, plus whatever details you enter about the listing itself. Some of those details, like a business name or website, are meant to be shown publicly once approved. We use your email to follow up if a steward has a question and to let you know what happened to your submission.

Photos and logos. A photo or logo you upload becomes public once a steward approves it. Photos from phones can contain hidden details such as the place they were taken. We remove those details when a photo is uploaded, but please only share images you are comfortable making public.

If you report a concern or ask to claim a listing, we collect your message and, optionally, your email for follow-up.

If you sign up for the newsletter, we collect your name and email and send you a message with a link to confirm. You only join the newsletter after you click that link, and a sign-up nobody confirms is deleted after 30 days. We use your details to send you the newsletter and for nothing else.

If you become a community steward or admin, we collect your email, a securely hashed password, and a two-factor authentication credential. We never see or store your actual authenticator codes. We also keep a permanent internal log of moderation actions, meaning what you approved, flagged, or resolved and when. That log is an accountability record and is never shown to the public.

Events from our community calendar. Some events on the calendar are copied automatically from a public Google Calendar that we maintain. Those events contain only the public details of the event.

Companies that help us run the site

We use a small number of service providers. They handle information only to provide their service to us, and we do not allow them to use it for advertising.

• Vercel hosts the website and keeps the technical logs mentioned above.
• Supabase stores our database and runs steward logins.
• Brevo sends our emails, including notices to stewards, messages to people who submitted something, and newsletter confirmations.
• Cloudflare manages our domain name and runs the human-verification check (Turnstile) on every public form. We do not send Cloudflare your name or email, only a verification token your browser generates, but Cloudflare may see your IP address and browser details to do its job.
• OpenStreetMap supplies the map images and the address lookup. When a map loads, your browser requests the map tiles directly from their servers, so they can see your IP address and which part of the map you are viewing. When you type a street address on a form, our server sends that address to OpenStreetMap's Nominatim service to place a pin on the map. We do not send your name or email, and OpenStreetMap may keep a record of the request.
• Wolf & Pigeons builds and maintains this site and can access its systems for that purpose only.

Cookies

We do not use advertising or tracking cookies. Stewards and admins get a login cookie so they stay signed in. The human-verification check from Cloudflare may use small amounts of browser storage to tell you apart from automated spam.

What we don't do

• We don't sell, rent, or trade your personal information.
• We don't use your data to train AI models.
• We don't run ad networks or tracking pixels on this site.
• We don't require an account to search, browse, or read anything public.

Who can see what

• The public can see any listing, event, or report once a steward has approved and published it.
• Community stewards and admins can see pending submissions in their assigned category (or all categories, if unrestricted), the correction and concern queue, and submitter contact info for items in their queue.
• Nobody outside VERB Community, the service providers, and our site developer listed above has access to submitter emails, newsletter subscriber emails, or the internal moderation log.

How long we keep information

Published listings, events, and reports are kept as long as they are active and accurate, and a steward reviews them over time. We do not yet delete anything on an automatic schedule. Contact information from submissions stays until a steward removes it or you ask us to remove it, and we are working on a clear schedule for submissions that are never published. Newsletter subscriptions are kept until you ask to be removed. The internal moderation log is kept indefinitely as an accountability record.

Your choices

You can ask us to remove your submission, correct information about you, or remove you from the newsletter at any time. Use the “Report a Concern” link on any listing or email us at hello@verbcommunity.org. You can also ask to see, correct, or delete the personal information we hold about you. We aim to respond within 45 days.

Do Not Track

We do not track you across other websites, so we do not respond differently to Do Not Track signals from your browser.

Children

This site is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has sent us information, tell us and we will remove it.

Changes to this policy

If this policy changes in a way that affects how your information is used, we will update this page and change the date at the top.

Contact

Questions about privacy can go to hello@verbcommunity.org.