Yakima Valley Computer Resource | Coding, Tech & Tutorials

Overview

Yakima Valley Computer Resource ("YVCR", "we", "us", or "our") operates yvcr.com and certain related tools (e.g., Gallery, Store, Item Tracker).

Information We Collect

Account information (when you register or log in): username, email, hashed password, basic profile details.
Contact form data: name, email, subject, message, and reCAPTCHA response.
System and security logs: IP address, timestamps, requested URLs, user actions (e.g., login attempts), rate‑limit and CAPTCHA results. We maintain activity and audit logs to protect the service.
Uploads/content you provide: files or images submitted through site features (e.g., Gallery, Tracker, Store product data).
Cookies and similar: a session cookie (for login and security), theme preference (cookie or localStorage), and basic site preferences.

How We Use Information

Provide core site functionality (authentication, user features like Tracker/Gallery/Store).
Respond to inquiries via the contact form and send necessary service emails.
Secure the site (e.g., rate limiting, abuse prevention, auditing, enforcing terms).
Improve reliability and troubleshoot errors.

We do not sell personal information. We do not run third‑party advertising or behavioral tracking.

Cookies and Local Storage

Session cookie (name: yvcr_session): required for login and basic security; set with Secure, HttpOnly, and SameSite protections.
Scoped store admin session: a separate cookie namespace for store management to isolate privileges (may appear with a different cookie name).
Theme preference: stored as a cookie or in localStorage to remember light/dark mode.
Contact form convenience: localStorage may temporarily retain form inputs on your device until sent or cleared.

Third‑Party Services

We may load assets or use services from providers who receive your IP address and user‑agent when content is requested:

Google reCAPTCHA (spam and abuse prevention on forms).
CDNs for libraries and fonts (e.g., Bootstrap, Font Awesome, Google Fonts, Leaflet, Chart.js).
SMTP provider for sending service emails.

These providers operate under their own terms and privacy policies.

Data Sharing

We share information only as needed to operate the Site and services, comply with law, protect rights and safety, or with your direction. Typical examples include our email service provider (to send contact form messages) and security service(s) for anti‑abuse controls.

Retention

We keep account data while your account is active. Security and server logs (including IP addresses) are retained for a reasonable period to ensure integrity and investigate issues. Uploaded content persists until you remove it or until housekeeping policies apply.

Security

HTTPS is enforced for secure transport (except on localhost).
Strong session settings (Secure, HttpOnly, SameSite) and CSRF protections.
Rate‑limiting, CAPTCHA checks, and audit/activity logging.
Passwords are stored using industry‑standard hashing.
Destructive actions (like deleting store products) require explicit confirmation and CSRF validation.

No system is perfectly secure; please use a strong, unique password and keep your account details confidential.

Your Choices and Rights

You can update or delete your account information where available in your profile or by contacting us.
You may request access, correction, or deletion of your information (subject to legal and security constraints).
You can adjust theme preferences and clear localStorage at any time in your browser.

Children’s Privacy

Our services are not directed to children under 13. If you believe a child has provided us personal information, please contact us so we can take appropriate steps.

Changes to This Notice

We may update this Privacy Notice from time to time. The “Effective date” above reflects the latest revision. Your continued use of the Site after changes means you accept the updates.

Privacy Notice