Upload a photo to see it on the big screen!
# Privacy Policy
**Effective Date: July 10, 2025**
*(Last Updated: July 10, 2025 – amended to add affirmative click-wrap consent, class-action waiver, and forum-selection clause)*
---
## 1 · Introduction
DB Taverns Co, doing business as **Maddy’s Tavern**, **Maddy’s Ole No. 6 Tavern**, and **Maddy’s AKA Maddy’s** (collectively, “**Company,**” “**we,**” or “**us**”), operates a publicly accessible, Cloudflare-hosted web application that allows users (collectively, “**you**” or “**User**”) to upload images that are immediately displayed on an OptiSign digital board and on a public web page. We are headquartered at **228 S 1st St, Divernon, Illinois 62530, USA**.
This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our Service. **PLEASE READ THIS POLICY CAREFULLY. BY AFFIRMATIVELY CLICKING THE “I AGREE” BUTTON OR CHECKBOX PRESENTED AT THE POINT OF UPLOAD (THE “CLICKWRAP”), YOU:**
1. **AFFIRM THAT YOU ARE AT LEAST 18 YEARS OF AGE;**
2. **HAVE READ, UNDERSTOOD, AND AGREED TO THIS PRIVACY POLICY;** and
3. **CONSENT TO THE PUBLIC DISPLAY OF ANY CONTENT YOU SUBMIT.**
If you do not agree, do not click “I Agree” and do not use the Service.
---
## 2 · Information We Collect
We collect only the information that you provide or that is incidentally generated by your use of the Service:
| Category | Description | Purpose |
| ---------------------- | ---------------------------------------------------------------------------------------------------------- | --------------------------------------------- |
| **User Content** | Any images, text, or other materials you voluntarily upload. | To publicly display the content as requested. |
| **Technical Data** | IP address, browser type, device identifiers, and timestamps automatically captured in server or CDN logs. | Site operation, security, fraud prevention. |
| **Clickwrap Metadata** | Timestamp, IP, and a cryptographic hash of your consent action. | To prove affirmative consent and compliance. |
We **do not** require account registration, do not use analytics, and do not monetize or sell personal data.
---
## 3 · Affirmative Click-Wrap Consent ("I Agree")
Before any upload is accepted, you must check a box labeled **“I am 18 or older and agree to the Privacy Policy and Terms of Use.”** A second independent checkbox explicitly states **“I understand my image will be displayed publicly online and on the OptiSign board.”** Both checkboxes must be selected before the **Submit** button is enabled.
A SHA-256 hash of the consent payload (checkbox states, policy version number, timestamp, and requesting IP) is logged to tamper-evident storage for evidentiary purposes.
If you later dispute consent, this log entry will serve as prima facie proof that you assented via a standard click-wrap mechanism recognized by Illinois and federal courts.
---
## 4 · How We Use Information
1. **Service Delivery & Public Display** – Display User Content publicly, both online and on-premise screens.
2. **Security & Site Integrity** – Detect abuse (e.g., spam, malware, or harassing content).
3. **Legal Compliance** – Respond to lawful requests, court orders, or subpoenas.
4. **Record-Keeping of Consent** – Retain click-wrap logs to demonstrate valid consent.
We use no information for marketing, profiling, or targeted advertising.
---
## 5 · Cookies & Tracking
We do **not** employ analytics, advertising beacons, or fingerprinting scripts. Our only cookies are **strictly necessary** Cloudflare security cookies (e.g., `__cf_bm`) that expire within 24 hours and do not track you across sites.
---
## 6 · Third-Party Service Providers
We rely on the following processors solely for hosting and security:
* **Cloudflare, Inc.** – CDN, DDoS mitigation, TLS termination.
* **GitHub Pages** – Static asset hosting and CI pipeline.
These vendors process IP addresses and request metadata under their own privacy policies and are contractually prohibited from using data for their own purposes.
No other third-party sharing occurs, except as legally required.
---
## 7 · Data Retention & Deletion
| Data Type | Retention Period |
| ------------------------------------- | ------------------------------------------------------------------------------------ |
| **User Content** | Until you request deletion, or automatically purged after 7 days per rotation rules. |
| **Technical Logs / Clickwrap Hashes** | 30 days (security) unless extended for an investigation. |
| **Support Emails** | While the ticket is open + 1 year. |
Deletion requests may be sent to privacy@dbtaverns.com.
---
## 8 · Your Rights
Under Illinois law and other applicable statutes (e.g., CCPA for CA residents, GDPR for EU visitors), you may request access, correction, deletion, or export of any personal data we hold. Contact us using the information in Section 12.
---
## 9 · Children’s Privacy (18+ Only)
We do not knowingly allow anyone under 18 to use the Service. If we discover a minor has provided data, we will delete it immediately.
---
## 10 · Security
We implement TLS 1.3 encryption in transit, least-privilege IAM on hosting, and regular vulnerability scans. No method is 100% secure; you upload at your own risk.
---
## 11 · Governing Law & Dispute Resolution
### 11.1 Forum Selection
All claims **arising out of or relating to** this Privacy Policy or the Service shall be **instituted exclusively** in the state courts of **Sangamon County, Illinois** or, if federal jurisdiction exists, the **U.S. District Court for the Central District of Illinois**. You and the Company **consent to personal jurisdiction** in these courts and waive any objection based on inconvenient forum.
### 11.2 Class Action Waiver
To the fullest extent permitted by law, **you agree to bring claims only in your individual capacity, and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding.** **CLASS ARBITRATION AND CLASS ACTIONS ARE NOT PERMITTED.** The court may not consolidate individual claims or preside over any form of representative proceeding.
If a court of competent jurisdiction finds the class action waiver unenforceable, the entire Section 11 shall be null and void.
---
## 12 · Contact Us
**DB Taverns Co**
228 S 1st St
Divernon, IL 62530 USA
---
## 13 · Changes to This Policy
We may amend this Privacy Policy from time to time. Updated versions will be posted with a revised “Last Updated” date. **Material changes** will require re-affirmation via click-wrap.
---
*© 2025 DB Taverns Co. All rights reserved.*