Privacy
Reading this site needs no account and sets no cookies. It loads nothing from other sites: fonts, scripts and styles are served from www.tiffin.cc itself.
Visitors
The web server keeps short-lived logs of page requests (including the visitor's IP address) to keep the site running and to limit abuse; requests are rate-limited per connection. Requests of the feedback form (opening it, loading it and sending it) are left out of those logs. The site has no analytics, no advertising and no tracking. The theme you choose (light or dark) is remembered in your own browser only.
People in the records
The archive publishes public records: meeting minutes name the officials and staff who acted, and the members' votes are part of the record. In the derived financial pages, payments to private individuals (refunds, deposits, reimbursements, employees and officials) are grouped as one payee without names, payable numbers are hidden, and medical and personnel details are withheld from line descriptions. Sole proprietors paid for goods and services are shown by name, like any business. The original documents the city published (including the payables lists) remain available as published; the page views and files of payables lists, and of the council packets that include them, are kept out of search engines.
If something here names you in a way you believe is wrong, please tell us.
Feedback you send us
The Feedback link on every page lets you tell us about a mistake, a problem or an idea. It is the only place on this site where you can send us anything. Sending feedback is voluntary, and we use it only to fix and improve the site.
What we keep with your message:
- What you write, the category you choose, and your name and e-mail address only if you give them (they are optional; give them only if you want a reply).
- The page you were on (its address and title, and which record it shows) and the page you came from:
for a page on this site its address, for another site only its domain name (for example
google.com, never the full address). We keep only the parts of an address that say which record a page shows; anything else in it, such as what you searched for, is removed. - Which of our web addresses you used (for example
www.tiffin.cc) and whether you used the dialog or the plain form. - Technical details that help us reproduce a problem: your browser's user-agent string and language, the version of the site you saw, and, when you use the dialog (it needs JavaScript), your time zone offset, your window and screen size, light or dark mode, and how long the page had been open. The plain form without JavaScript sends none of the dialog-only details.
- When you use the dialog, a random session code made by your browser for that tab. It ties together several messages sent from the same visit. It is not a cookie, it is never sent anywhere else, and it is forgotten when you close the tab.
- The country Cloudflare (our network provider) reports for your connection, if it reports one.
- Not your IP address. We keep only a scrambled code made from it with a secret key (a "keyed hash") that changes every year; for an IPv6 address also one for its wider network. It cannot be turned back into your address without our secret key. We use it to stop floods of messages from one connection, and to see whether several messages came from the same connection.
- We delete that code, together with the browser details (user-agent, language, time zone, window and screen size, country), after 90 days. The message, the page and the site version stay until the message is deleted.
Who sees it: only the site's administrator. Feedback is never published, sold or shared, and it is not used for advertising or tracking. If you give an e-mail address we may use it once to reply to you. If notifications are switched on, the administrator's notification service (ntfy) receives only the message's number, its category and the page; never what you wrote or anything about you.
How long we keep it: feedback is deleted automatically after 365 days (messages marked as spam, and messages caught by our automatic spam trap, after 30 days). To have your message deleted sooner, send another feedback message saying so (with enough detail for us to find it).
The requests the feedback form makes (opening it, loading it and sending it) are left out of the web server's logs. The form sets no cookies and loads nothing from other sites (unless an anti-spam check from Cloudflare is switched on; the form says so when it is).
Data last updated October 15, 2026. Built from the archive's documents; see how the data is built.