Privacy notice for resident accounts

Only what is needed to verify residency: your full name, email address, property address, relationship to the property (owner, tenant, household member, or authorized representative), an optional unit/lot identifier, an optional public display name, and your agreement to the community rules and this notice.

To confirm that an account belongs to a current owner, tenant, or household member of a property within the Association, and to operate passwordless sign-in. Eligibility depends only on residency or an authorized relationship — never on your opinions or anything you post.

Your legal name and property address are restricted to authorized verification personnel (currently the site owner). They are never displayed publicly. In the community forum you appear only by your chosen display name. IP addresses are kept only in restricted security logs for abuse detection and never determine login eligibility.

Sign-in is by single-use email magic link only. There are no passwords and no passkeys. Links are short-lived, single-use, and invalidated when a newer link is requested. Sessions use secure, HttpOnly cookies; you can sign out of one device or all devices at any time.

Account records are retained while your account is active. You may request correction of your information or deletion of your account. Some audit records (that an account existed, was reviewed, approved, or suspended) are preserved for integrity, but personal contact details are minimized.

Any historical resident directory used to help verify residency is treated as a private, historical reference only. It is never published, never downloadable, and never used to contact you for anything unrelated. It is not proof of current ownership or residency. A stale or incomplete list will never be used to permanently deny a legitimate resident — you can appeal.

The complete eligible-address list is never sent to your browser. Addresses are stored server-side as keyed hashes, there is no public address-lookup endpoint, and repeated address guessing is rate-limited and flagged.

If a security issue affects resident data, the owner is notified and affected accounts are protected (for example, by revoking sessions). To correct your information or report a privacy concern, use your account page or the corrections channel.