Privacy Notice
Effective October 19, 2026. This notice describes the current CoastalSpecials.com directory and submission forms.
Information we collect
When you browse, our first-party analytics uses signed browser and session identifiers, keyed hashes of IP addresses, visit times, page categories, referring website domains, and broad device categories. These identifiers are pseudonymous, not a guarantee of anonymity. Our hosting provider may also maintain server access logs.
Our visitor cookie lasts up to one year and our visit-session cookie up to 30 minutes. We use these for visit counts, activity measurement, and abuse prevention. Admin and private-preview cookies support authenticated access.
We also measure restaurant card views and actions such as opening menus and clicking restaurant, phone, map, social, or share links. These records use the same pseudonymous browser and visit identifiers, the selected menu day, referring domain, campaign label, and automation signals. Restaurant activity records are retained for up to 90 days. We do not record menu search text or precise visitor coordinates in these reports. Aggregated restaurant reach and action counts may be shared with business owners.
Print analytics records print-builder page loads, print-dialog opens, and generated PDF downloads, plus the restaurant IDs and page count included in each sheet. These records contain no visitor identifiers, IP hashes, search text or menu contents and are retained for up to 90 days. A print-dialog open does not confirm completed printing or saving.
Visit behavior measurements
We measure estimated active time while a public page is visible and focused, pausing after 60 seconds without input. We also measure scrolling, public-page paths, public search terms and result counts, filter use, loading failures and outgoing link actions. Search terms are normalized, limited to 80 characters, and discarded when they resemble email addresses, URLs or long digit strings; please do not enter personal information into public search. We do not record screens, keystrokes, submission-form contents, URL query strings or precise coordinates in these behavior records. Records use the existing pseudonymous browser and visit identifiers and are retained for up to 90 days. Admin and recognized agent browsing is excluded. Global Privacy Control disables this additional behavior measurement. You can exclude this browser from first-party traffic measurement on our traffic preferences page. Timing and activity are estimates; blocked requests and abrupt page closes can leave gaps.
Facebook post attribution
Links we share may include fixed Facebook campaign fields and a nonpersonal label identifying the Page or group placement, posting date and sequence. For tagged page loads we associate that label with the existing first-party visit record. Attribution uses a 90-day reporting window; older label associations are removed when a tagged visit is recorded or an admin traffic report is opened. We do not save raw query strings, Facebook click identifiers, account IDs or group names in this measurement. Global Privacy Control and the first-party traffic exclusion preference disable this additional attribution. Tagged links can be copied, so labels identify the shared link, not proof of a visit from Facebook or a particular person.
Optional Google Analytics
For visitors identified as being in the United States, Google Analytics starts automatically unless you have declined analytics or your browser sends Global Privacy Control. For other or unknown regions, it starts only with your permission. Google Analytics measures page visits and restaurant and event interactions using analytics cookies and browser/device information. Google processes this information on our behalf. Analytics cookies may last up to two years. Advertising personalization and Google signals are disabled. We do not send submission details, search text or precise coordinates to Google, and page URLs sent by our code omit query strings. When Google Analytics is enabled, we separately send only the fixed Facebook campaign fields and validated nonpersonal post label described above. We use an IP-country database locally on our server to select the consent behavior; this lookup does not send your IP address to a geolocation provider. IP-country estimates may be inaccurate, including when a VPN is used. IP Geolocation by DB-IP, using United States ranges adapted from its database retrieved October 12, 2026 under CC BY 4.0. You can allow or decline this optional measurement and stop it using the Opt out of Google Analytics link below, or enable it using Analytics preferences. Declining does not stop our separate first-party analytics described above. How Google uses information from sites that use its services.
Location
The nearby feature uses your browser's location permission. Precise coordinates are used in your browser to calculate distances. Our analytics records use of the feature and aggregated nearest-restaurant and broad distance categories, rather than your precise coordinates. Previously granted browser permission may be reused. You can clear the location in the site or revoke permission in browser settings.
Submissions and requests
We store your email, the information you enter, and any uploaded menu file to review changes and respond to you. Your contact email is not displayed in public listings. Approved restaurant facts and specials may be published. Do not submit sensitive personal information.
Use and sharing
We use information to operate the directory, review submissions, maintain accuracy, measure traffic, and prevent misuse. Hosting and service providers may process information to operate the site. Information may also be disclosed when required by law. External restaurant, social media, and map links are governed by their providers' policies when you follow them.
Copyright requests
To report copyright concerns or request removal of material, use our contact form. We review requests privately.
Retention and requests
Some location analytics is periodically removed after 90 days. We have not established a fixed deletion schedule for all traffic records, submissions, uploaded files, backups, or hosting logs. You may request access, correction, or deletion using our contact form. We may need to verify the request and retain records where necessary for security, legal obligations, or dispute handling.
Browser signals and changes
The site does not currently change its first-party analytics behavior in response to Do Not Track signals. This notice does not describe advertising tracking across other websites. You can control cookies and location permission in your browser. We will publish material changes here with a new effective date and provide additional notice where required.