Privacy Policy

Who operates Local.

Local. (accessible at cebulocal.com) is a Handuraw Pizza Love Project, spearheaded and operated by Handuraw Pizza, based in Cebu, Philippines. When we say "we", "us", or "our" in this policy, we mean Handuraw Pizza.

What we collect

• Account information: Your email address and name when you sign up (via passwordless email magic link, one-time code, or Google OAuth). This is used for authentication and to contact you about your profile.
• Profile information: Whatever you choose to submit for your directory profile — name, description, contact details, social links, pricing, instruments, genres, video embeds, photos (avatar, cover, gallery), Happenings/events, and location data (address plus latitude/longitude coordinates you pick on the map). This is voluntarily provided and displayed publicly on the directory.
• Messages to profile owners: If you send a message to a profile through our "Send a message" form, we store the sender's name, email, and message so the owner can reply. The email is relayed through Local. so that the owner can respond directly to you.
• Feedback notes: Feedback left for a profile is stored privately in that owner's dashboard inbox. It is never shown publicly.
• Session data: We use cookies to keep you signed in. These are functional and not used to build a cross-site tracking profile of you.
• Bot-protection signals: Public forms (sign-in, send-a-message, feedback) use Cloudflare Turnstile to deter bots. Turnstile processes limited, privacy-preserving signals from your browser — it does not fingerprint or profile you.

What we don't do

• No data selling. We do not sell, rent, or share your personal information with third parties for their marketing purposes. Ever.
• No invasive tracking. We don't fingerprint your browser, build behavioral profiles, or track you across other websites.

Analytics

We use counter.dev, a privacy-focused analytics tool, to understand basic site usage (page views, referrers). It does not use cookies, does not collect personal data, and does not track individual visitors. We use this solely to understand which parts of the directory are most useful.

Infrastructure

Local. runs on Cloudflare Workers. Cloudflare may process your IP address and request metadata as part of normal web traffic handling (DDoS protection, routing). We also use Cloudflare's built-in Workers Logs for error monitoring — this helps us fix bugs, not track users.

We send transactional emails (sign-in links, verification codes, welcome messages) to operate the service. These are functional only — we will never send marketing emails or spam.

Your data, your control

• You can update your profile at any time.
• You can delete your profile and account at any time. When you delete your account, we remove your data from our database.
• You can contact us to request a copy of your data or ask any privacy-related questions.

Third-party services

We use the following third-party services:

• Cloudflare — hosting (Workers), database (D1), image and file storage (R2), session storage (KV), and bot protection (Turnstile)
• Google — optional OAuth sign-in (only if you choose to sign in with Google), plus Google Maps for location search and map display when you set a profile's address
• Resend — transactional email delivery (sign-in links, verification codes, welcome notes, profile status updates, and relayed profile messages)
• counter.dev — privacy-focused analytics
• YouTube, Vimeo, TikTok — embedded players, only loaded on profile pages where the owner has added a video link. These providers set their own cookies when their embed loads; we don't control them.

Changes to this policy

If we make significant changes to this privacy policy, we'll update the "Last updated" date at the top. For major changes, we may also notify you via email.

Contact

Questions about this policy? Send us a message.