Privacy Policy — American Legion Post 200

American Legion Post 200 ("Post 200," "we," "us," or "our") respects your privacy. This policy explains what information we collect on wallispost200.org, how we use it, and your rights.

1. Information We Collect

Information you provide directly

Contact forms — name, email address, phone number, and your message.
Membership applications — full name, date of birth, branch of service, period of service, address, phone, and email.
User accounts — name, email address, and a securely hashed password (we never store plaintext passwords).
Hall rental inquiries — name, contact details, event date, and group size.

Information collected automatically

Server logs — IP address, browser type, pages visited, and timestamps. Logs are retained for 30 days and used only for security and troubleshooting.
Session cookies — a single, secure session cookie is set when you log in. It expires when you close your browser or after 2 hours of inactivity. We do not use advertising or tracking cookies.

Third-party map tiles

Our interactive maps use OpenStreetMap tile servers (via Leaflet.js, served locally). Tile requests may be logged by OpenStreetMap under their own privacy policy. We do not share your personal information with OpenStreetMap.

2. How We Use Your Information

To respond to contact form submissions and hall rental inquiries.
To process membership applications and notify you of your membership status.
To authenticate you when you log in to your member account.
To send event reminders, post newsletters, and member communications you have requested.
To maintain the security and proper operation of this website.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Retention

Contact and hall rental inquiries — retained for 1 year, then deleted.
Membership applications — retained for the duration of your membership plus 3 years per American Legion record-keeping requirements.
User accounts — retained while your account is active. Deleted within 30 days of a verified deletion request.
Server logs — automatically purged after 30 days.

4. Data Security

We use industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and restricted database access. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Your Rights

You have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Request deletion of your data (see our Data Deletion page).
Opt out of non-essential communications at any time by contacting us.

6. Children's Privacy

This website is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us and we will delete it promptly.

7. Third-Party Links

Our site may link to external websites (legion.org, texasboysstate.com, etc.). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the site after changes constitutes acceptance of the updated policy.

9. Contact Us

Questions about this privacy policy or your data? Contact us at:

American Legion Post 200
330 Legion Rd, Wallis, TX 77485
Phone: (979) 478-9913
Email: commander@wallispost200.org