Privacy policy

Information we collect

When you request a rental, we collect your name, email, phone number, delivery and pickup addresses, access notes, rental selections, scheduled dates, acceptance of rental terms, and communications with us. We may also collect referral-form details if you submit them. To protect public forms from automated abuse, our server briefly reads network request information and stores only a one-way keyed digest, not the raw client IP, in a short-lived request counter.

Catch a Binny promotion

Catch a Binny is optional. If you submit its sign-up form, we collect your name, email and US mobile number and store them in Supabase with the consent wording, its version, the public page path, and submission time. We use these records to administer the promotion and record your marketing choices. The discount code appears on screen; this sign-up does not create a rental, charge you, or email the code. After a sign-up is successfully saved in a production deployment, we use Resend to send The Binnys an owner-only operational alert with the submitted name, email and mobile number, Pacific signup time, source page, and consent version. This is not a customer marketing message or a code email. Email-provider acceptance does not guarantee inbox delivery, and an unavailable provider does not change the saved sign-up or its on-screen reward.

The form asks for permission to receive recurring marketing emails and texts, including automated texts. Consent is not a condition of purchasing a rental. This feature does not currently send marketing emails or texts; messaging must be separately configured before sending begins. You can withdraw marketing consent by contacting howdy@thebinnys.com. Any future marketing emails must include an unsubscribe option, and marketing texts must support STOP and HELP. We do not send sign-up email addresses or mobile numbers to PostHog or Google Ads.

Website analytics

We use PostHog to understand visits to public pages, website performance, and broad steps in the rental funnel. The events may include an anonymous browser-session identifier, the page path, referrer origin, campaign tags, browser and device characteristics, Core Web Vitals, and coarse selections such as package size, rental length, tote-dolly quantity, and whether a discount was applied.

We configure PostHog without automatic element capture, user profiles, customer identification, advertising, or automatic exception capture. We do not intentionally send names, email addresses, phone numbers, delivery or pickup addresses, unit numbers, access notes, referral codes or partner names, order IDs, Stripe session IDs, payment details, or complete sensitive URLs to PostHog. Form values remain excluded from automatic capture, and an additional filter removes sensitive properties and query values before analytics events are sent. The PostHog project is configured not to store client IP addresses, and every website event disables PostHog's GeoIP enrichment so city, postal-code, latitude, and longitude properties are not added.

Masked session replay and Replay Vision

Website analytics, including masked replay, is enabled by default unless you turn it off below or your browser sends a privacy signal. PostHog can reconstruct a masked view of customer-facing pages, including the rental flow, referral journey and Catch a Binny. This records interactions and page layout, not a video from your camera. PostHog Replay Vision uses automated AI analysis to summarize journeys and identify possible website failures or frustration. Its findings are suggestions, not a verification of an order or payment.

Inputs and customer text are masked. Only a small allowlist of public labels, structural styling and existing public images may remain visible. Contact information, address suggestions, notes, discount codes, receipt details and embedded payment areas are blocked. Admin, authentication and API routes are excluded. Replay removes URL query strings and fragments; we do not enable capture of payment frames, network bodies or headers, console logs, canvas contents, browser storage or cookies. Turning analytics off below stops replay and automated analysis of new recordings for this browser. Browser Do Not Track and Global Privacy Control signals are also honored.

Advertising measurement

We use the Google Ads tag to measure which advertising visits lead to completed bookings. After our server verifies a paid order, we send Google the recorded payment total in USD and its Stripe Checkout Session ID as a transaction identifier to prevent duplicate conversions. This advertising measurement is separate from PostHog; Stripe Session IDs are still excluded from PostHog.

Google may use advertising cookies and click identifiers to attribute a booking to an ad. We do not configure enhanced conversions, customer contact matching, or personalized advertising on the site, and do not intentionally send customer names, email addresses, phone numbers, rental addresses, notes, or card details to the advertising tag. Sensitive URL fields and fragments are removed. Turning website analytics off below also turns off this advertising measurement. The tag honors browser Do Not Track and Global Privacy Control signals. See the Google Privacy Policy.

How we use information

We use order information to quote, schedule, deliver, pick up, support, secure, and administer your rental; prevent fraud and automated form abuse; respond to questions; and comply with legal obligations. We do not sell personal information.

Service providers

Supabase stores application, authentication, order, operational, and short-lived request-counter data. Google Mapsreceives address search text through our server to suggest street addresses and resolve a selected address. Its geocoding service checks the entered delivery and pickup addresses so our server can calculate the applicable delivery fee. Google address suggestions are not cached by our application; Google coordinates are used transiently for that calculation and are not saved in your rental draft or order. We retain the street address you select for your rental and may retain its place identifier. See the Google Privacy Policy. This essential address service is separate from Google Ads and does not send rental addresses to our analytics or advertising tags. Geoapify receives the route endpoints through our server when a non-local address needs a road-mile delivery and pickup fee calculation. It returns distance and travel-time information without real-time traffic. We do not send those routing requests to PostHog or use them for analytics. Stripeprocesses payments; The Binnys does not receive or store your full card number. Resend sends a paid-booking confirmation with rental, address, schedule, and total details to the customer, plus an operational notification to the business. These are transactional emails needed to fulfill the order. Resend also sends the business an alert when you create a referral code, including the contact details and message you submit. This helps us administer the referral program. Vercel hosts the website and server routes. Geoapify receives the address text you enter through our server to suggest complete street addresses, ranked around Sacramento. Photon, operated by komoot, provides OpenStreetMap-based suggestions if Geoapify is unavailable or returns no complete results. They may return a formatted address, street, city, state, ZIP, latitude/longitude, and provider reference, which we may store with your order to plan service. These remain fallback services if Google is unavailable or the application request ceiling is reached; an unverified address is never treated as free delivery. See the Photon service information, the Geoapify Privacy Policy and OpenStreetMap copyright and license page. PostHog processes the limited anonymous website-analytics data described above in its United States cloud service. See the PostHog Privacy Policy. These providers process data under their own policies and agreements.

Cookies and local storage

We use essential browser storage to preserve an in-progress rental form on the one-page checkout. Supabase authentication may use cookies for owner/admin login. PostHog uses session storage for an anonymous analytics identifier that expires when the browser tab closes. If you turn analytics off below, that choice is saved in local storage so it remains effective. We do not use PostHog advertising cookies, and the analytics configuration honors browser Do Not Track signals. Google Ads may use advertising cookies as described above. We save only a one-way fingerprint of the conversion transaction identifier locally to avoid reporting the same booking again on a receipt reload. Catch a Binny saves only sign-up and reminder-visibility flags in browser memory, local storage and session storage, plus a run count for the current browser visit in session storage, not the name, email or mobile number entered in its form. These flags stop the running mascot after a successful sign-up. If storage is blocked, we remember completion during the current page and client-side visit only; a full reload or another browser may not retain it.

Retention and security

We retain order and operational records for as long as reasonably necessary for rentals, accounting, dispute handling, legal compliance, and business administration, then delete or de-identify them when appropriate. Request counters expire automatically and are not used for advertising or customer profiling. We use reasonable administrative and technical safeguards, but no internet system is completely secure. Promotion sign-ups and consent records are retained only as reasonably necessary to administer the promotion, honor marketing choices, and meet applicable recordkeeping obligations.

Your choices

You may request access, correction, or deletion of your personal information, subject to applicable law and records we need to retain. To make a request or ask a privacy question, email howdy@thebinnys.com or call 916-712-7030. California residents may have additional rights under applicable law.

Updates

We may update this policy as our services change. The current version will be posted on this page.