Privacy notice

Other pages on this site load Vercel Web Analytics, which records a page view for the page you open. This privacy notice loads no analytics.

Contact us asks for your name, email address, a topic, and a message. That message is sent to alfred@lubbockdepotdistrict.com through AgentMail, from events@lubbockdepotdistrict.com, with your email as the reply-to address. A reply to that email reaches you. The page shows a short thanks. You get no automatic reply, and the message is the email itself. It is not added to an account.

The newsletter is double opt-in. Signup on the newsletter page asks for your name and email, and a checkbox that you want the letter. The confirmation email comes from events@lubbockdepotdistrict.com (Lubbock Depot District Events). You join the weekly list after you open that link. The link expires in 7 days.

The site stores your name, email, whether the subscription is waiting or active, when you signed up, an unsubscribe token, a hash of the confirmation link, and the time you unsubscribe if you do. Weekly letters go to confirmed subscribers. You can unsubscribe from the link in a letter or on the unsubscribe page. If you type an email there, an unsubscribe link is emailed when that address is already subscribed. The page shows the same message either way.

The newsletter checkbox on account signup starts unchecked. Checking it starts this same double opt-in.

An account asks for your name, email, and a password. The password is stored as a salted hash. The account also stores nights you save: the listing and the time you saved it. Account, newsletter, and password-reset records are kept in the site’s data store.

Forgot password sends a reset email only when that address already has an account. The email comes from reset@lubbockdepotdistrict.com (Lubbock Depot District). The link expires in about an hour and works once. The site stores a hash of the link. If the address has no account, no reset email is sent, and the page shows the same message either way.

If someone tries to create an account with an email that already has one, that existing account receives a note with a one-time reset link. A new address does not get that note.

Signup, sign-in, password reset, newsletter signup, unsubscribe, and the contact form each have a hidden field and expect about three seconds before submit. Filling that field, or sending the form sooner than that, is ignored: nothing is saved and nothing is emailed. The contact, newsletter, and reset forms still show their usual success message. Signup shows no confirmation. Sign-in shows the usual mismatch message.

Those same forms run a bot check (Vercel BotID). If the check does not pass, the page says it could not verify the submission, and nothing is saved or emailed.

Those forms also count attempts by IP address. Password reset and unsubscribe also count attempts by email. The site stores a hash of the IP address or email with a count, separate from accounts. Sign-in counts expire after about 15 minutes. The other counts expire after about an hour.

Signing in sets an HTTP-only cookie named ldd_session. It lasts 30 days, is sent back only to this site, and holds a signed account id, an expiry, and a session version. The password stays out of the cookie. On the live site the cookie is sent only over a secure connection. Signing out deletes it. Changing or resetting your password makes older sign-in cookies stop working.

Lubbock Depot District does not sell personal information.

To ask for a copy of the personal information this site holds about you, or to ask for deletion, email alfred@lubbockdepotdistrict.com.

This site is a listings board for nights out. It is not directed at children, and it does not knowingly collect personal information from children. If you believe a child has given us personal information, email alfred@lubbockdepotdistrict.com and ask us to delete it.

When this notice changes, the last-updated date above changes with it.