Privacy Policy

When you create an account, make a purchase, or interact with our website, we may collect:

• Name, email address, mailing address, and phone number
• Account credentials (email and encrypted password)
• Membership tier and status
• Donation and purchase history
• Communications you send to us (contact form, email)
• Aggregate device and browser information collected automatically through privacy-first, cookieless web analytics

We use your information to:

• Process memberships, donations, and merchandise orders
• Provide access to the member portal and gated content
• Send membership renewal reminders and tax receipts
• Communicate about FOMGC events, news, and preservation milestones
• Generate aggregate reports for the Board of Trustees (never shared externally)

We do not sell, rent, or trade your personal information to third parties.

Membership records — including name, tier, join date, and contact information — are maintained in our database for the purpose of managing member benefits and board reporting. The FOMGC Board of Trustees receives a bi-weekly membership roster for administrative purposes only.

Partner access code users (Town of Garner employees and organizational partners) have their organization name associated with their account for access verification.

All payments are processed securely through Stripe. FOMGC does not store, process, or have access to your credit card number, bank account details, or other sensitive payment credentials.

Stripe's privacy policy and PCI-DSS compliance govern the handling of your payment data. We receive only a transaction confirmation, amount, and a truncated reference for our records.

Transactional emails — including welcome messages, renewal reminders, tax receipts, and payment confirmations — are sent through Resend. These are service-related communications tied to your membership or transaction, not marketing.

You may receive occasional updates about FOMGC events and preservation milestones. You can opt out of non-transactional emails at any time by using the unsubscribe link in any email or by contacting us directly.

You can create your FOMGC account either with an email address and password, or by signing in with Google ("Continue with Google"). If you choose Google sign-in, Google sends us only the following information from your Google account:

• Your email address
• Your basic profile information (name and, where provided, profile picture)
• A unique Google account identifier used to recognize you on return visits

We use this information solely to create and authenticate your FOMGC member account. We do not access your Gmail, Google Drive, Calendar, Contacts, or any other Google service, and we do not request any additional Google permissions beyond basic profile and email.

You can revoke FOMGC's access to your Google account at any time from your Google Account → Security → Third-party apps with account access. Revoking access does not delete your FOMGC account; it only disables the Google sign-in path. To delete your FOMGC account, see "Your Rights" below.

FOMGC relies on a small number of vetted service providers to deliver its website and member portal. Each receives only the information necessary to perform its function:

• Supabase — authentication and database storage (your account record, membership status, and notes)
• Stripe — payment processing (card details never touch our servers)
• Resend — transactional email delivery (welcome, renewals, receipts)
• Google — optional sign-in via OAuth (scope limited to basic profile and email); and, with your consent, Google Analytics + Google Ads measurement (aggregate usage and outreach performance)
• Cloudflare — website hosting, content delivery, basic DDoS protection, and cookieless traffic analytics

Each of these providers has its own privacy policy and applicable security certifications. FOMGC does not share your information with advertisers, data brokers, or any party not required to operate the website.

We use essential cookies to run the site. These maintain your authentication session when you sign in, and our payment processor (Stripe) sets its own cookies to secure transactions and prevent fraud at checkout. Essential cookies do not require consent.

For baseline traffic measurement we use a privacy-first, cookieless analytics service that reports aggregate visits without setting tracking cookies, building visitor profiles, or sharing personally identifiable information.

We also use Google Analytics and Google Ads measurement to understand how visitors find and use the site and how our nonprofit outreach performs. These are loaded under Google Consent Mode and set analytics/advertising cookies only after you accept via our cookie banner. If you decline, no analytics or advertising cookies are set. You can change your choice at any time using the Cookie Preferences link in the footer. We do not sell your personal information or use it for cross-site advertising profiles.

We retain your account and membership data for as long as your account is active or as needed to provide services. Donation and payment records are retained for seven years to comply with IRS record-keeping requirements for 501(c)(3) organizations.

If you request account deletion, we will remove your personal information within 30 days, except where retention is required by law or for legitimate nonprofit record-keeping.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Opt out of non-transactional email communications
• Request a copy of your data in a portable format

To exercise any of these rights, contact us using the information below. We will respond within 30 days.

If you have questions about this privacy policy or wish to exercise your data rights, please contact us: