Luminary Vintage Festival LLC
Privacy Policy
Luminary Vintage Fest is run by Luminary Vintage Festival LLC in Columbus, Ohio ("we"). This policy covers luminaryvintagefestival.com and the emails and texts we send.
What we collect
- Signup: first name and email, plus your mobile number if you add it.
- Free RSVP: first name, email, number of tickets, whether you kept the early bird list box ticked, what you shop for if you pick any, and your phone if you add it.
- Giveaways: while a giveaway is running, the entries your RSVP earns. Everyone who RSVPs gets a personal referral code, and we record which friend's link brought you, if any, and the bonus entries it earned. The
lvf_refcookie remembers a friend's code for 14 days so we can credit them when you RSVP. - Vendor application: your name, shop or brand name, city and state, Instagram handle, email, phone (optional), what you sell, stock description, past markets, what you bring, and any photo and bio. If you choose "Continue with Google", Google shares your name and email with us.
- Earlier lists: entries from our Oct 3 giveaway, our earlier Tally vendor form, and Humanitix RSVPs if we use them as a backup. We email these people only if that form said we would.
- Consent records: when you tick a consent box we save the time, the page, your IP address, your browser's user agent and the exact text you saw.
- How you found us: the utm tags in your first link, your first page, the referring site, and a Facebook click ID if the link had one.
- Site activity: page views and button clicks, linked to a random visit ID and, once you sign up, RSVP or apply, to your contact record. Ticket check-in times.
- Bot checks: Cloudflare Turnstile reads browser signals to tell people from bots. Vercel Speed Insights measures page speed without cookies.
Why
To send the drops, tickets and updates you asked for. To run giveaways and credit referrals. To review vendor applications and tell you our decision. To check you in. To see which posts, flyers and ads bring people. To prove you agreed to emails or texts. To keep out spam and bots.
Who we share it with
We don't sell your information. These services run parts of the site for us and use your data only to provide that service:
- Vercel (hosting)
- Supabase (database, logins, file storage)
- Resend (email)
- Twilio (texts, once our text program is live)
- Cloudflare Turnstile (bot checks)
- Google Maps (only after you tap "Show map")
- Google Sign-In (only if you choose it)
- Stripe (vendor booth payments, and paid tickets once they launch)
- Humanitix (backup RSVP page, only if we use it)
- Tally (our earlier vendor form, and the backup vendor form if we use it)
- Meta and Google Analytics (ad and visit measurement, only after you tap Accept)
We also share information when the law requires it.
Texts
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. See our SMS Terms.
Cookies and storage
Our own cookies run whether or not you accept ad cookies, and they are never sent to Meta or Google.
| Name | What it does | How long |
|---|---|---|
lvf_ft | How you first found us (utm tags, first page, referring site, Facebook click ID) | 30 days |
lvf_sid | Random ID for this visit | 30 minutes after your last page |
lvf_cid | Signed ID linking this browser to your contact record after you sign up, RSVP or apply | 1 year |
lvf_ref | A friend's referral code from their link, so their bonus entry can be credited when you RSVP | 14 days |
lvf_consent | Your Accept or Decline choice | 180 days |
lvf_draft | Lets you come back to an unfinished vendor application | 30 days |
sb-…-auth-token (may be split .0, .1) | Keeps vendors and staff logged in. Only set when you log in | Until you log out or the session ends |
sb-…-auth-token-code-verifier | Completes "Continue with Google" | A few minutes |
lvf_draft:{event} (local storage) | Copy of your unfinished vendor application on this device | Until you submit or clear it |
lvf_once:{step}:{event} (session storage) | Stops us counting the same step twice in one visit | Until you close the tab |
lvf_door_sound (local storage) | On our staff check-in phones only: whether check-in beeps are on | Until it is cleared |
_fbp, _fbc | Meta pixel. Only after Accept | Set by Meta (about 90 days) |
_ga, _ga_{id} | Google Analytics. Only after Accept | Set by Google (up to 2 years) |
| Cloudflare and Google Maps frames | Turnstile, and the map after "Show map". They may set cookies on their own domains | Set by them |
Change your choice anytime with "Ad cookie settings" at the bottom of any page. If your browser sends Global Privacy Control, we treat it as Decline.
Your choices
Every marketing email has an unsubscribe link that works instantly. Reply STOP to any text. To see, fix or delete your data, email luminaryvintagefest@gmail.com from the address you used, and we'll finish within 30 days. Deleting your data also deletes your giveaway entries and referral code. After a deletion we keep a do-not-contact record (a scrambled code of your email and phone, not the addresses) so an old list can't add you back. We also keep the consent text, time and page as legal proof, without your contact details.
How long we keep it
We keep your contact record until you ask us to delete it. Unfinished vendor applications are deleted after 30 days.
Security
HTTPS everywhere. Staff use 2-step login, and only staff who need your data can see it.
Children
The site isn't for children under 13, and we don't knowingly collect their data. If you think a child gave us information, email us and we'll delete it.
Changes
We update the date at the top when this policy changes.
Contact
Luminary Vintage Festival LLC · luminaryvintagefest@gmail.com · Instagram @luminaryvintagefest