Privacy Policy

Last updated: August 4, 2026 · Operated by Innovaite LLC d/b/a LodeFinder

LodeFinder is built to collect as little as possible. We do not run third-party analytics, advertising, or cross-site trackers, we do not use ad or tracking pixels, and we do not sell or share your personal information. This policy explains exactly what we store, why, who processes it, and how to have it deleted.

What we collect and store

• Your email address — to sign you in (passwordless magic links) and to send the drop-alert digests and account emails you ask for.
• A Stripe customer ID and subscription status — to know whether your account is active. Card numbers and payment details are handled entirely by Stripe; we never see or store them.
• Your watchlists — the states or map areas (bounding boxes) you choose to watch, so we can match new drops against them.
• An alert ledger — a record of which claims we've already emailed you about, so we don't repeat them.

That's the whole list. No passwords (there are none), no browsing history, no location tracking, no device fingerprinting, no advertising profiles. Sign-in tokens are stored only as one-way hashes and expire in 15 minutes; your session cookie is a signed, HttpOnly cookie that carries only your account ID and an expiry time.

Information handled automatically by our infrastructure

Like any website, our hosting provider (Cloudflare) processes basic connection data — such as your IP address and request headers — to route traffic, apply security protections, and prevent abuse. We do not use this to build a profile of you, and we do not combine it with your account to track your behavior.

How we use your information

Only to operate the Service: to authenticate you, provide the feed and watchlists, send the alert and account emails you request, process your subscription, and keep the Service secure. We do not use your data for advertising or profiling, and we do not sell it.

Who we share it with (processors)

We share the minimum necessary with the service providers that make LodeFinder work:

• Cloudflare — hosting, content delivery, and security (processes requests and the database that stores your account, watchlists, and alert ledger).
• Stripe — subscription billing and payment processing (holds your billing details and a customer record; we store only the customer ID and status).
• Our email delivery provider — sends your magic-link and alert-digest emails; it processes your email address and message content to deliver them.

BLM and USGS receive only the anonymous map coordinates needed to answer a land-status inspection — never your identity. We may also disclose information if required by law or to protect the Service and our users. We do not sell personal information and have not done so.

Data retention and deletion

We keep your account data while your account exists so the Service keeps working. Canceling a subscription is not the same as deletion — we keep your account so you can resubscribe. To delete your account and its associated data (email, watchlists, and alert history), email support@lodefinder.com from your account address and we will remove it, typically within 30 days. Some records may be retained where a processor (such as Stripe) or the law requires it for tax, accounting, or fraud-prevention purposes. Expired sign-in tokens are deleted automatically.

Cookies

We use exactly one cookie: a first-party, HttpOnly session cookie that keeps you signed in. It is not used for advertising or analytics, and there are no third-party or tracking cookies. Because we set no tracking cookies, there is no cookie-consent banner to click through.

California privacy (CCPA / CalOPPA)

We honor the following regardless of where you live, and California residents have these rights under the CCPA/CPRA:

• Know what personal information we collect (listed above) and access a copy of yours.
• Delete your personal information (see "Data retention and deletion").
• Correct inaccurate personal information.
• No sale or sharing. We do not sell or "share" personal information as those terms are defined under California law, so there is no "Do Not Sell or Share" action needed — but you may still ask us to confirm this in writing.
• No discrimination for exercising these rights.

To exercise any right, email support@lodefinder.com. We will verify your request against your account email. Our site honors browser Global Privacy Control / Do-Not-Track signals by default, since we do not track across sites in the first place.

Children

The Service is for adults (18+) and is not directed to children. We do not knowingly collect information from children under 13.

Changes and contact

We may update this policy; we will revise the "Last updated" date above and, for material changes, notify account holders by email. Questions or privacy requests: support@lodefinder.com.