Jewish Young Community (JYC)

Jewish events and community for ages 21–39 in New Jersey

LAST UPDATED · SEPTEMBER 1, 2026

Privacy Policy

This policy explains what JYC collects, why it is used, who may process it, how long key records are kept and how to make a request.

Email provider
Sender
Event registration
The service named on each confirmed event page
Payment data
Handled by the named external payment service
Privacy contact
jycnewjersey@gmail.com

Information you choose to provide

  • Contact details and messages you send
  • Event registration information requested by the named registration service
  • Dietary or accessibility details you choose to share
  • Donation or payment information submitted to the named external service; JYC does not store complete card numbers

Information collected automatically

JYC collects limited technical and activity data only for features a visitor chooses to use. After analytics consent, JYC’s private jyc-mi event collector records an allowlisted event name, page or content group, campaign or channel, coarse device type, a one-way session hash, and timing data. It does not store form contents or a raw IP address. These records are deleted automatically after 14 months.

When a visitor creates or follows a JYC invite link, JYC records the event ID, a server-issued random code hash, and aggregate share, visit, and RSVP-button-click counts. It does not record the sender’s or recipient’s identity. These referral records are deleted automatically 180 days after their last activity.

When a visitor explicitly enables browser notifications, the browser creates a device token and sends it with the visitor’s consent choice to JYC’s Cloudflare service for encrypted storage and Firebase delivery. JYC does not receive browsing history or a phone number. The token is deleted when the visitor removes that browser, withdraws permission, or the delivery service reports it invalid.

JYC also uses short-lived, one-way request hashes to enforce rate limits and prevent replay or duplicate submissions. These safeguards are not used to identify a visitor or build a profile.

How JYC uses information

  • Respond to requests
  • Send updates you requested
  • Operate events and registrations
  • Protect, measure and improve the website
  • Meet legal, accounting and safety obligations

Service providers and sharing

JYC may use WordPress and website hosting, Sender for email, the registration service named on an event page, and the donation or payment service named before checkout. JYC does not sell or rent personal information.

For local Shabbat times, Hebcal receives only the hub or ZIP a visitor chooses; JYC draws the New Jersey event map on this site without a third-party map provider. Google Analytics, configured through Site Kit, runs only after analytics consent.

Information is shared only with authorized JYC reviewers, event partners, venues or service providers when needed to deliver a requested service, protect the community or comply with law.

Cloudflare Workers is JYC’s protected edge-service provider. It processes only the data needed for an enabled feature: browser-notification device tokens and consent; optional weekly-email addresses and consent; verified Eventbrite callback fields used to prepare private welcome drafts; and public event details used for the weekly digest and controlled Google Wallet testing. Cloudflare stores protected service credentials as encrypted Worker secrets. WordPress stores only the public Worker address and its non-secret verification key.

Browser notifications also use Firebase Cloud Messaging. After a visitor explicitly opts in, the browser creates a device token that is sent through Cloudflare, stored encrypted, and used only for the weekly event digest. JYC does not receive the visitor’s browsing history or phone number. Notification delivery state is held by the external delivery service rather than WordPress, so WordPress does not provide an independent history of successful sends. Optional weekly email uses Cloudflare and Brevo only after confirmed consent.

Cloudflare relays authenticated Eventbrite registration callbacks containing first name, email address, town, stated interests, event name, and provider record ID when those fields are available. JYC uses them only to prepare a private, human-reviewed welcome draft. The public event digest and controlled Wallet routes send public event information, not visitor identity.

Retention and measurement

  • Event-support introductions, cost-help requests and community-story submissions: automatically deleted after 45 days
  • Photo-choice privacy requests: automatically deleted after 45 days
  • Private event feedback: automatically deleted after 180 days
  • Private accommodation requests: automatically deleted after 90 days
  • Founding-member interest records: automatically deleted after 180 days unless the record remains active and verified
  • Resolved photo-removal working records: automatically deleted 30 days after resolution unless a legal or safety hold is recorded
  • Consent-based measurement records, including Ask JYC survey feedback: automatically deleted after 14 months
  • Named local check-in exports: removed manually during the 48-hour event closeout
  • Sender subscription records: retained until unsubscribe or deletion request, apart from a minimal suppression record
  • Browser-notification device tokens: retained encrypted until the visitor removes that browser, withdraws notification permission, or the delivery service marks the token invalid; the Worker deletes the subscription when removal is requested
  • JYC private jyc-mi measurement records: deleted automatically after 14 months by the daily measurement cleanup task
  • Anonymous referral-link records: event ID, a server-issued random code hash, and aggregate share, visit, and RSVP-click counts; no sender or recipient identity; automatically deleted 180 days after the last activity

Analytics cookies and JYC’s private measurement log are used only after you accept analytics. The private log excludes form contents, names, email addresses, phone numbers, precise locations and payment details.

Photos, stories and messaging

JYC publishes an identifiable posed photo or submitted story only with permission for that use. WhatsApp may expose a phone number and profile details according to the guest’s settings and the type of chat.

Your privacy choices

Use any email’s unsubscribe link, change analytics preferences on the site, or ask JYC to review, correct or delete information you provided. Some records may be retained for legal, accounting, fraud-prevention, safety or suppression purposes.

Email a Privacy Request

Privacy contact: jycnewjersey@gmail.com · (862) 217-4942