Privacy Policy

1. Introduction

DVCFan Forums (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our forum platform. By using DVCFan Forums, you consent to the practices described in this policy.

2. Information We Collect

Account Information

• Email address — required for registration and account recovery.
• Display name — publicly visible on your profile and alongside your posts.
• Password — securely hashed; we never store passwords in plain text.
• Profile avatar — optionally uploaded by you.
• Bio and signature — optionally provided by you and publicly visible.

Authentication Data

If you sign in through OneKey (our single sign-on provider), we receive your name and email from the identity provider. We store only what is necessary to identify your account.

Patreon Data

If you link your Patreon account, we receive your Patreon user ID, email, full name, and membership status. This data is used solely to verify your supporter status and grant access to supporter-exclusive features.

User-Generated Content

We store threads, posts, replies, direct messages, travel journal entries, ROFR contract submissions (including the broker associated with the submission), feedback, and any other content you create on the platform.

Automatically Collected Data

• IP address — collected for rate limiting, access logging, and abuse prevention.
• Session cookies — used to maintain your authenticated session.
• Usage data — page views, feature interactions, and access timestamps for operational purposes.

3. How We Use Your Information

• To operate and maintain your account and the Service.
• To verify your identity and enforce community guidelines.
• To process and display your posts, threads, and profile information.
• To send account-related notifications (approval status, moderation actions, digest emails).
• To verify Patreon supporter status and manage supporter features.
• To prevent abuse, spam, and unauthorized access.
• To improve the Service based on aggregate usage patterns.

4. Third-Party Services

We use the following third-party services to operate the platform:

• OneKey — single sign-on authentication provider.
• Patreon — supporter membership verification and content sync.
• Algolia — search functionality. Thread titles, content, and author names are indexed to provide search results.
• Pusher — real-time notifications and messaging delivery.
• Cloudflare R2 — image and file storage for user uploads.

Each of these services has its own privacy policy. We share only the minimum data necessary for each service to function.

5. Direct Messages

Direct messages between users are encrypted at rest using AES-256-GCM encryption. Message content is encrypted before being stored in our database and decrypted only when delivered to the intended recipients. DVCFan Forums staff do not routinely access the content of direct messages.

6. ROFR & Resale Prices Data Access Logging

Access to protected report data — including the Live ROFR Report and the Live Average Resale Prices report — is logged for security and anti-abuse purposes. Logs include your user ID (or null for anonymous visitors to publicly-shared view links), the endpoint accessed, the filters applied, the page requested where applicable, your IP address, and the timestamp. This logging is used to enforce rate limits, daily access limits, and to prevent unauthorized bulk data collection.

When a supporter saves a filtered view and shares its public link, the view's name is visible to anyone who opens the link. The filter parameters themselves are applied server-side and are not exposed in the public response.

7. Data Retention

We retain your account data for as long as your account is active. When content is deleted by you or by a moderator, it is soft-deleted (marked as removed but retained in our database) to support moderation and abuse prevention. Hard deletion of data may be requested by contacting us directly.

8. Cookies

We use session cookies to maintain your authenticated state. We do not use third-party advertising or tracking cookies. Cookies are essential to the operation of the Service and cannot be disabled without losing access to authenticated features.

9. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information on your profile.
• Request deletion of your account and associated data.
• Unlink your Patreon account at any time through account settings.
• Request account deletion, which will also remove the link to your Keyholder Vacations (OneKey) account. Because DVCFan Forums accounts are authenticated through OneKey, the Keyholder Vacations link cannot be removed independently without deleting your forum account.

To exercise these rights, contact us at the email address below or use the account settings page.

10. Children's Privacy

DVCFan Forums is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact

If you have questions or concerns about this Privacy Policy or your personal data, contact us at [email protected].