Privacy Policy

Effective November 2, 2026. This policy covers the Destination Cape Cod publication, its inquiry forms, community classifieds and Cape & Islands Guide chat.

Email Launch List

The email edition is coming soon. The separate email-list form collects your email address and an explicit, unchecked permission to receive Destination Cape Cod emails about local stories, upcoming events and holiday plans. We save your request, consent wording, version, timestamp and form context in SecureFormPro. Eligible new signups receive an ownership-confirmation email through Resend. A saved signup alone does not verify the address or start delivery of news editions.

Newsletter permission is separate from cookie choices, chat consent and earlier interest or contact requests. We do not turn those earlier requests into newsletter subscriptions. The confirmation message verifies your signup request; it contains no news edition or advertising. News editions have not started. You can withdraw your permission at any time through email preferences.

You can withdraw permission for future launch-list emails now by entering the address. We save a keyed, one-way identifier to prevent future use of that address for this list, including a repeat signup. The response does not reveal whether an address was registered. Withdrawal does not erase earlier consent evidence, unrelated contact requests or recovery copies; for a deletion request use the privacy request form.

SecureFormPro manages newsletter requests, consent evidence, confirmation status, withdrawals and delivery controls. A single-use confirmation link verifies control of the address only after you choose Confirm. Opening the link alone does not confirm anything, and confirmation cannot undo an earlier withdrawal. Confirmation links expire after 48 hours. Resend receives the recipient address and confirmation message to deliver it. Open and click tracking are off. Signed delivery, bounce and complaint events update delivery records and controls; a provider acceptance is not proof that a person read a message. Automated confirmation messages use an unmonitored no-reply address. Use the website forms for preferences and privacy requests.

The publishing service keeps keyed request identifiers, hashes, timestamps and reference identifiers to retry interrupted requests. It does not keep another copy of the email address in that request journal. Earlier keyed withdrawal records are preserved during the move to SecureFormPro, where withdrawals remain effective. Newsletter and consent records remain until the desk handles retention or a deletion request; moving a record to an archive is not erasure. Provider and backup retention below also applies.

Privacy Requests

Use the privacy request form to ask about access, correction, deletion, newsletter opt-out or another privacy concern. It collects your email address, request type and any details or earlier reference you choose to include. No marketing permission is required. We store the request and its notice version, time, receipt, status and handling history in SecureFormPro so the desk can review it.

A saved receipt acknowledges the request; it does not mean that information has been released, corrected or deleted. We may need to verify control of the address and determine the records and rights involved before completing a request. A newsletter opt-out takes effect without address confirmation. A privacy confirmation verifies the address for that request and does not subscribe you to marketing.

The form keeps a random retry reference, request hash and time in this tab’s session storage for up to 24 hours; it does not store your email or message there. Ownership-confirmation pages remove the token from the address bar and keep it in page memory only until use or departure. They do not store it in browser storage. If you leave before confirming, reopen the original link.

Please provide only the details needed to locate and handle your request. Do not send identity documents, passwords, financial account details or unnecessary information about other people. This publication is intended for a general audience. If you are a parent or guardian concerned about information a child submitted, explain the concern through the privacy request form without including additional sensitive details.

Information You Choose To Send

Our forms collect your name, email address, message, and any business, town, or category details you provide. With your consent, new submissions are stored in SecureFormPro so the publication can manage the inquiry. A submission may also include its page address and limited campaign attribution. Please do not put personal information in campaign links.

Advertising, business, event, contact, and newsletter-interest forms save requests. They do not make a booking, purchase advertising, activate a newsletter subscription, or send an email or text message. Submissions are not automatically published. We do not sell these details to advertisers or use them for behavioral advertising.

Harwichport Resort Information Requests

Current status: automated resort inquiry collection and email forwarding are not active. The site currently offers the resort’s published contact options. The following describes how the request feature would work if enabled; it is not a claim that a request is being sent today.

On town vacation guides and their supporting articles, a labeled Harwichport Resort placement opens information-request options. When the inquiry form is available, it requires your name, email address and an unchecked sharing agreement. Phone, travel dates, guest count and preferences are optional. If enabled, the request, consent record and guide or campaign attribution would be saved in SecureFormPro and shared with Harwichport Resort through Resend email delivery after the sharing agreement. Regional guides are identified as Cape Cod rather than assigned an invented town.

This sharing lets the resort respond to your request. It does not make a reservation, confirm availability or subscribe you to marketing. Do not send payment information, sensitive personal details or information about other people. A saved receipt and email-provider acceptance are different from confirmed delivery; the form reports the state that has actually been verified. You can also use the resort’s published phone number and website directly.

For recovery after an interrupted submission, this tab’s session storage holds a random inquiry identifier, consent time and version, guide/placement context and a fingerprint of the entered details. This feature does not save your name, email, phone or message in browser storage. It keeps the same reference for an uncertain retry and clears it after confirmed success. The reference cannot be used to retrieve contact fields. Clearing storage or using another independent tab loses this recovery link and may prevent duplicate protection. Browser autofill has its own settings.

SecureFormPro retains resort inquiries, consent and audit records subject to the organization’s review of retention and access or deletion requests; they have no automatic expiry. The forwarding service retains an encrypted email payload and delivery-event metadata with the inquiry; archival or moving a record to trash is not erasure. Encrypted recovery copies expire on the SecureFormPro backup schedule described below. Resend’s published Pro policy retains email and log data for 30 days, with backup copies lasting seven days; its account and security records can follow different policies. Once delivered, the resort holds its own copy under its own practices. Ask the publication about its records through Contact The Desk, and contact the resort directly about its copy.

Guide Chat And AI Processing

The chat interface and its connection to SecureFormPro load only after you select Chat. Opening the interface does not start an AI conversation; the separate contact and AI-processing agreements below are still required.

The optional SecureFormPro chat requires your name, email address, and separate unchecked agreements for contact storage and AI chat processing before a conversation starts. A phone number is optional. Contact details, messages, consent records, and any request for a team response are stored in SecureFormPro. A team response is not guaranteed or immediate.

The assistant uses selected, reviewed passages from our guide library. It does not browse live availability, make reservations, or provide an emergency service. For an AI answer, the service sends a filtered question and selected guide passages through OpenRouter to its configured AI provider. The separate contact fields and stored conversation history are not supplied to that model request. Avoid sharing sensitive information, payment details, or information about other people in chat messages.

Cookies, Storage And Your Choices

Optional ad view and click measurement is off until you choose Accept Optional or enable it in Cookies & Privacy. Reject Optional keeps that measurement off. Both choices leave reading, contextual advertisements, forms, saved stories and chat available. You can reopen settings from any public page’s footer and change your choice immediately.

Saved-story bookmarks use local storage on this device. The web app caches public interface files for its offline message; it does not cache form submissions or private publishing records. Chat uses an opaque capability in this tab’s session storage to resume a conversation. That capability expires after seven days. Closing the chat does not delete its stored records.

You can remove saved stories and clear this site’s browser storage using your browser settings. You can also use Chat Options to end the current chat session. To request access to or deletion of information stored by the publication, use the privacy request form and include your submission reference if available. Clearing browser storage alone does not delete a server record.

No Google Analytics, advertising pixels, or third-party marketing cookies are enabled on this site. SecureFormPro loads the chat interface when you select Chat and handles requests for that feature. Security and operational logs may contain technical request information. The private publishing desk uses a session cookie for authorized access.

What Is Stored In Your Browser

The public reading pages do not set advertising cookies. Essential storage supports security and features you request; optional ad measurement uses a temporary delivery token in page memory, not a persistent visitor identifier.

• Privacy choice: dcc-privacy-v1 in local storage records your yes/no choice, notice version and dates for 180 days. The legacy dcc-ad-measurement value records the same choice for compatibility. We ask again when the current choice expires or the notice version changes. No choice means optional measurement is off.
• Saved stories and weather: dcc-saved and dcc-weather-preference store the stories or forecast area you choose until you change them or clear site data. Approximate coordinates are stored only when you select Remember This Location. A session flag remembers whether this tab requested location.
• Form retry protection: general inquiry, news-tip, classified and resort request references and hashes use session storage when those forms are used, as described in their sections. This feature does not store contact fields or messages.
• Email signup: the popup opens when you select Email or Join the Email List. The form uses this tab’s session storage for a request reference, hash and time for up to 24 hours to retry an uncertain result; it does not save the email itself there. An earlier version used dcc-email-invite-v1 to remember invitation dismissal. The current popup does not read or set that old preference. Clearing site data does not remove a stored signup or withdrawal.
• Chat: an opaque resume reference is stored in this tab after a conversation begins and expires after seven days. Use Chat Options to end that session; ending it does not erase server records.
• Offline interface: a service worker caches public interface files and an offline message until an update replaces them or you clear site data. Private records and submitted forms are not cached by it.
• Private desk: signed-in publishing staff use an essential Secure, HttpOnly, SameSite session cookie with an eight-hour limit. It is not an advertising cookie.

These choices apply to this browser, not every device. If browser storage is blocked, an explicit measurement choice lasts only for the current page and optional measurement returns to off on a new page. Clearing site data also removes saved stories and weather preferences. It does not erase information already held by the desk or its providers.

Retention And Service Providers

Netlify hosts the public website. Workspace-managed infrastructure runs the publishing service. SecureFormPro stores new inquiries, email-list records and chat records. Resend delivers signup-confirmation emails and processes their delivery events. It is also configured for resort email forwarding if that currently inactive service is enabled. OpenRouter and its configured model provider process AI answer requests.

Resend stores message content and delivery information in the United States. Its published retention policy keeps email and log data for 30 days on the current Pro plan and backup copies for seven days; account and security records may follow different policies. Email recipients and their mailbox providers hold their own copies.

Chat transcripts are scheduled for removal after 90 days. Contact, inquiry, consent, and receipt records in SecureFormPro remain until an authorized operator handles retention or a deletion request; they do not automatically expire with the transcript. SecureFormPro’s encrypted backup copies are scheduled to expire after 14 days, so removed information may remain in recovery copies until those copies expire.

Earlier inquiries submitted through the original publishing-desk forms remain in that separate service. There, spam inquiries are removed after 30 days and resolved inquiries after 365 days; open inquiries remain until handled. Its encrypted off-host backups retain up to 168 hourly snapshots and local recovery copies retain up to 28 snapshots. New form receipt reservations in that service contain a request hash, timestamp, type, and reference identifiers, rather than a second copy of the form’s contact details or message.

Questions And Changes

We change the effective date on this page when the policy is updated. Before a material change in how information is collected or used, we will post a prominent notice on the site and obtain any new permission needed before enabling the change.

Send a privacy request about your information or use Contact The Desk for corrections and general questions. We will update this policy when our services or collection practices change. New marketing delivery or nonessential tracking requires an updated notice and applicable choices before activation.

Location-Based Weather

We do not ask for location on a first visit. Choose Use My Location to request your browser’s permission. If you previously granted permission and selected automatic location, we may use your approximate location to request a National Weather Service point forecast. Coordinates are rounded to two decimal places before leaving your browser. The forecast service holds a bounded temporary cache of approximate points and forecasts, separate from contact records. Weather locations are not sent to SecureFormPro or its AI provider.

A chosen forecast area is remembered in this browser’s local storage. If you select Remember This Location, the rounded coordinates and area label are stored on this device until you choose another area, switch to Use My Location, or clear site data. Automatic location mode does not store your coordinates in local storage. You can revoke location permission in your browser settings; manual area selection continues to work. Network providers may process request information under their normal hosting and security practices. Geolocation may be unavailable or inaccurate, and NWS coverage is primarily the United States.

News Tips And Community Classifieds

News tips are private editorial submissions stored with your name, email, optional town/topic, consent and limited attribution in SecureFormPro. They are not automatically published. Do not submit sensitive personal documents or unnecessary information about other people. This form does not promise confidentiality, a response or emergency monitoring.

A classified submission collects private name and email fields separately from its intended public title, category, town, description, price and response link. It requires separate unchecked storage consent and publication permission. SecureFormPro stores the full submission and both notice records. The publishing service keeps the proposed public fields, permission evidence and private reference identifiers for moderation, without a second copy of the private contact fields.

Only approved, unexpired classified fields and a random listing identifier appear on the public board. The response link leads to a third-party page; information you share there is subject to that site's practices. Avoid putting private contact details in public listing text or links. Use Contact The Desk with your reference to request removal or report a concern.

Pending listings expire after 30 days. Approved listings are published for up to 30 days. Proposed public fields are purged from the publishing service 90 days after rejection, withdrawal or expiry, through scheduled cleanup. Compact request hashes, reference identifiers, status and fixed moderation audit records remain for replay protection and accountability. Central contact and consent records follow the SecureFormPro retention described above; removing a public listing does not erase those records or existing recovery copies.

These two forms use this tab's session storage for an opaque request identifier and request hash to help retry an uncertain submission without creating another record. Contact fields and submitted text are not saved there by this feature. The identifier is cleared after confirmed success. Browser autofill has its own settings. Clearing browser storage does not delete server records.

Official Source Monitoring

The publishing service checks a reviewed list of official public pages for changes. Public status shows only source identity, link and check times. Limited source excerpts and change hashes are retained privately for editorial review for up to 90 days. This monitoring does not track reader browsing or publish source text automatically.

Contextual Advertising And Aggregate Measurement

Advertisements are labeled with their sponsor. Most link directly to the advertiser’s website, whose privacy policy applies after you follow the link. Harwichport Resort ads on vacation guides can open the information-request flow described above. Ads are selected by page topic, placement, schedule and rotation settings. Advertisers start evenly; optional optimization adjusts selection using recent aggregate click results after a minimum sample. We do not create visitor profiles or use advertising cookies, third-party pixels or behavioral targeting.

Our service counts ads selected for delivery. With your permission, it also counts viewable impressions and clicks. A viewable impression normally requires at least half the ad to remain visible for one second in a foreground tab. A click can qualify one impression if a view has not yet been recorded. These client-reported counts are not unique-reader or certified billing totals. When optional measurement is enabled, a random token for one ad delivery expires after 15 minutes and prevents repeat counting. Measurement tables do not store your IP address, browser details, page address, contact information or event bodies. Hosting and security systems may process technical request information separately.

Token records are removed through scheduled cleanup after expiry; daily aggregate counts and selection-pool history are retained for up to 180 days. Encrypted recovery copies follow the backup retention described above. Advertiser reports contain aggregate campaign and placement results. Administrative changes are logged with the authorized operator’s identity and action, separately from audience measurement.

Allow aggregate ad viewability and click measurement in this browser.

Changing this setting saves only your preference on this device and immediately controls further viewability and click events on the current page and future visits. Withdrawal does not remove aggregate counts already recorded. Basic server counts of ads selected for delivery continue. We keep optional measurement off when your browser sends Global Privacy Control or Do Not Track, even if a previous choice allowed it. Clearing site storage removes this preference. Ads remain visible and their links continue to work.

Advertising Artwork And Management

The private advertising library retains original artwork and its source, permission, origin and credit records. Some ads use original AI-assisted illustrations; illustrations do not depict actual properties, staff or completed work unless expressly identified. Only reviewed web images and required public credits appear in eligible campaigns. Pausing or ending a campaign stops new image requests through our media service, but cannot retrieve images already downloaded. Originals and rights records remain for campaign administration; use Contact The Desk to request a review or removal.

Authorized SecureFormPro administrators can manage this publication’s campaigns through a limited server connection. This does not give advertisers access to reader inquiries or chat records.