Privacy Policy

Information we collect

You do not need an account to browse Quad Cities Food Trucks. Our hosting infrastructure may process ordinary technical information, such as IP address, browser information, and request logs, as needed to deliver, secure, and operate the service.

Participating food truck owners and authorized administrators use accounts to manage authorized parts of the service. We process account and authentication information, such as an email address and display name, as needed to provide that access.

Quad Cities Food Trucks may also use information a participating truck publishes publicly -- on the truck's own website or a public social media page -- to help build and maintain that truck's listing, using only what those pages show any visitor.

Facebook Page connections

Participating food truck owners may choose to connect a Facebook Page they manage. When a Page is connected, Quad Cities Food Trucks may receive basic Page information, information showing that the person manages the Page, an authorization credential, and Page content needed to identify food truck schedules, locations, updates, and cancellations.

We request only the access needed for this purpose. Quad Cities Food Trucks does not receive or store your Facebook password. Facebook authorization credentials are stored securely on server-side infrastructure and are not exposed publicly.

See Connecting your Facebook Page for more detail on how connecting works, what it involves, and why it's optional. Truck owners also agree to the Truck owner agreement, which records what an owner has agreed to about their listing.

Google sign-in

Authorized administrators and invited food truck owners may choose to sign in with Google. Google sign-in is handled through Amazon Cognito. Quad Cities Food Trucks receives the identity information needed to authenticate the sign-in and match it to the existing authorized account, including the email address used for that match.

For a truck owner, signing in with Google does not create a new owner account, claim a truck, or grant access by itself. The Google identity is linked only to an existing invited owner account, and the existing Quad Cities Food Trucks owner-to-truck assignment remains the source of authorization.

Browser storage and authentication

When an administrator or truck owner signs in, Quad Cities Food Trucks stores a sign-in token and a small amount of other temporary sign-in information in your browser. This is necessary for sign-in to work; it is not used for advertising and does not track you across sites.

These values are temporary. They are held only for your current browser tab and session, are cleared when you sign out, and are discarded entirely when you close the tab or browser. They may include a sign-in token and a small amount of temporary sign-in state used to verify that a sign-in attempt is genuine, and, if you sign in with Google, the state Google's sign-in flow needs to complete. None of this is used on the public schedule pages, which do not require an account.

Sign-in is handled through Amazon Cognito, optionally together with Google. Those providers may set their own cookies or use similar technology on their own sign-in pages to complete and secure the sign-in; that is separate from Quad Cities Food Trucks and outside our control.

Quad Cities Food Trucks does not set advertising or tracking cookies, and does not use browser storage to profile you or follow you across other sites.

How we use information

Information is used only as needed to operate and secure the service, administer authorized access, respond to listing and support requests, and provide food truck schedule information. Quad Cities Food Trucks does not sell personal information or use Facebook data for advertising.

Removing Facebook access

A participating food truck owner may revoke Quad Cities Food Trucks' Facebook access through their Facebook or Meta settings. Once access is revoked, Quad Cities Food Trucks can no longer retrieve new information through that connection.

Revoking Facebook access stops future retrieval through that connection, but it is separate from asking Quad Cities Food Trucks to delete information already associated with the Page connection.

Truck owner accounts

A participating food truck owner may be invited to sign in directly to manage their own truck's schedule. We collect the owner's email address and a display name to deliver the sign-in invitation and to identify the signed-in owner within the portal.

This information is not shared publicly and is not used for analytics, advertising, or profiling. A truck owner can see and manage only their own assigned truck; they cannot see any other truck's schedule, account, or data. If an owner account is disabled or removed, the historical record of the schedule information that owner published is retained, the same way other account activity on the service is retained.

Truck menus

A signed-in truck owner may optionally add menu content to their truck's listing: a link to a menu hosted elsewhere, and/or a small collection of uploaded PDF, JPG, or PNG files — for example several photos of a printed menu. A menu is never required and nothing is added automatically. We do not verify the prices, items, or availability shown in a truck's menu photos or link; that information comes directly from the truck.

When a photo is uploaded, we remove embedded metadata such as GPS location and camera details before storing it, and may also resize an oversized photo to fit our size limit; the photo itself is otherwise shown unchanged. Uploaded files are kept in private storage and served only through our content delivery network, never directly. An owner can hide their menu from the public schedule at any time without deleting the underlying files, and can remove an individual file, reorder the files, or remove everything entirely, which deletes the corresponding stored file(s). Because a hidden menu's files are kept rather than deleted, a link to one that was already saved or cached elsewhere may still work until that cached link expires.

Requesting to manage a truck's listing

A prospective or existing food truck owner may submit a request to manage a truck's listing without first creating an account, using a public request form. We collect the name, email address, and optional phone number of the person submitting the request, how they are related to the truck, and, for a new truck, the proposed truck details and any website or social media links provided.

This information is used only to review the request and, once a Quad Cities Food Trucks administrator approves it, to set up the corresponding truck owner account. It is not shared publicly and is not used for analytics, advertising, or profiling.

Site analytics

Quad Cities Food Trucks uses Cloudflare Web Analytics to understand how the public site is used and how well it performs. This provides aggregate measurements such as page views, visits, which pages are popular, which sites link to us, broad country and device information, and page performance timings.

Cloudflare states that its analytics beacon does not store or read information in your browser, including cookies, localStorage, sessionStorage, or IndexedDB. Quad Cities Food Trucks does not use analytics for advertising, and does not intentionally send account, administrator, food truck owner, or other profile identity information to the analytics service. Analytics runs on the public schedule, policy and information, and truck-listing request pages only. It is not loaded on the sign-in page, the administrator portal, or the Facebook Page connection flow.

As described above, ordinary infrastructure processing by our hosting and analytics providers still applies. This cookie-free description covers Cloudflare Web Analytics only, and does not describe the separate, necessary browser storage used when an administrator or truck owner signs in -- see "Browser storage and authentication" above.

Third-party services

Quad Cities Food Trucks uses service providers, including Amazon Web Services, Cloudflare, Meta, and Google, to operate portions of the service. Those providers may process information according to their own applicable privacy terms.