Privacy Policy

• Two forms — a contact form and an employment application — are the only places you give us information.
• Submissions are emailed straight to us. The Site keeps no database of your submissions, and we never sell personal information.
• One first-party cookie remembers your language. Analytics cookies count visits, and you can opt out.
• Applicants under 18 must include a parent or guardian’s contact information.
• Questions, or want something you sent us corrected or deleted? Email .

Contact form (on the visit page): your first and last name, email address, phone number (optional), a topic, and your message. The form asks for your consent to contact you about your message before it will submit.

Employment application (on the apply page): your contact details, age information, education and employment history, references, emergency contacts, work-authorization status, your electronic signature, and the other information the application form requests. Applicants under 18 must also provide a parent or guardian’s name and phone number. We never ask for your Social Security number on the Site. Section 8 covers applicant information in detail.

Analytics. When our analytics is switched on, the Site uses Google Analytics 4 (provided by Google LLC) and PostHog (provided by PostHog, Inc., hosted in the United States) to understand how the Site is used — pages viewed, approximate location from your IP address, device and browser type, and events such as searching flavors or clicking directions. We use this in aggregate to improve the Site; none of it is used for advertising. Google may use data collected on this and many other sites to maintain and improve its services, as described at How Google uses information from sites that use its services. You can opt out of Google Analytics with the GA opt-out browser add-on, and out of all analytics cookies through your browser settings (section 5).

Bot protection. The pages that host our forms use Cloudflare Turnstile to tell people from bots. Turnstile evaluates signals such as your IP address, TLS fingerprint and browser user-agent; Cloudflare states it cannot identify individuals from these signals. See the Cloudflare Turnstile Privacy Addendum.

Technical operation.The Site is hosted on Cloudflare’s network. When a form is submitted, your IP address is checked against a rate limit to block abuse — it is evaluated and discarded, not stored by us. Our servers keep short-lived technical logs (errors and request paths, never the contents of what you submitted) and anonymous daily counters of how many submissions the Site handled, which contain no personal information. Cloudflare processes visitor traffic under its own privacy policy.

The Site sets the following cookies. Exact names and lifetimes can change as these tools update.

You can block or delete cookies in your browser settings; the Site works fine without them (you would just need to re-pick your language). The Site also uses your browser’s own session storage — which never leaves your device and clears when the tab closes — to remember scroll positions and to save an in-progress employment application so a page refresh doesn’t wipe your answers (section 8).

When analytics is on, Google and PostHog set cookies that distinguish your browser over time, which is how repeat visits get counted. We do not allow any third party to collect information on the Site for advertising purposes.

We use what you send through the contact form to read and respond to your message. We use employment applications to evaluate candidates for jobs at the shop, and for nothing else. We use analytics and technical data to understand how the Site is used, to keep it working, and to protect it from abuse. That is the whole list — no marketing lists, no profiling, no automated decisions.

We do not sell personal information and we do not share it for advertising. The only parties that touch it are the service providers that run the Site for us:

• Cloudflare, Inc. — hosting, form delivery, bot protection (Turnstile) and rate limiting.
• Google LLC — our email provider: form submissions are delivered to and stored in our business mailbox, which Google hosts. Also Google Analytics (when on) and the embedded Google map on the visit page (section 14). See the Google Privacy Policy.
• PostHog, Inc. — analytics (when on), hosted in the United States, under the PostHog privacy policy.

Beyond that, we would disclose information only if the law required it (a subpoena, a court order), to protect the safety of our staff or the public, or — if the business were ever sold or reorganized — to a successor who takes on this policy’s obligations.

The employment application collects the information described in section 3, for one purpose: deciding whether to offer you a job at the shop. It is read by ownership and management, delivered and stored as email in our business mailbox, and never sold, shared for marketing, or used for anything unrelated to hiring.

You must be at least 15 years old to apply for hourly work. If you are under 18, the application requires a parent or guardian’s name and phone number, which we use to confirm permission and to comply with Maine’s rules for employing minors. A parent or guardian may contact us at any time to review the information their minor submitted or to ask us to delete it.

While you fill the application in, your draft answers are saved in your own browser’s session storage so a refresh doesn’t lose your work. The draft never reaches us until you press submit, and it is cleared when you submit or close the tab. Submitted applications are kept for as long as reasonably needed to consider you for the role and for future openings — generally no more than two years — unless the law requires longer or you ask us to delete yours sooner.

The Site itself stores no personal information. When you submit a form, the submission is transmitted over an encrypted connection and delivered by email to our business mailbox — that mailbox is the only place your submission exists on our side. There is no website database of messages or applications.

Contact messages are kept for as long as needed to handle your inquiry and for a reasonable period afterward. Employment applications are kept as described in section 8. Analytics data is retained by Google Analytics and PostHog under the retention settings of those tools. Anonymous operational counters (section 4) are swept within days.

The Site is served over HTTPS, form submissions are encrypted in transit, access to the mailbox where they land is limited to ownership and management, and the Site’s design — no accounts, no database of submissions, no stored payment or Social Security information — keeps the amount of data that could ever be exposed small. No website can promise perfect security, but if a breach affecting your information ever occurred, we would notify you as Maine law requires.

You can browse the entire Site without giving us any personal information. The forms only send what you type, optional fields are marked, and cookies can be blocked or deleted in your browser (analytics opt-outs are in sections 4 and 5).

If you want to know what information we hold about you, correct it, or have it deleted, email from the address you used, and tell us what you sent and roughly when. We honor reasonable requests from anyone, regardless of where you live, and will respond within 45 days. We may ask a question or two to confirm you are who you say you are, and we may keep information the law requires us to keep.

The Site does not respond to browser “Do Not Track” or Global Privacy Control signals. Those signals govern the sale and sharing of personal information for targeted advertising — which we do not do, for anyone, signal or no signal. To opt out of analytics measurement, use the controls in sections 4 and 5.

The Site is a general-audience site and is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has submitted a form, email us and we will delete it. Job applicants must be at least 15, and applicants under 18 are covered by the parent/guardian provisions in section 8.

The visit page embeds a Google Map so you can find the shop. When that page loads, Google receives standard technical data about your visit (such as your IP address) and may set its own cookies, under the Google Privacy Policy. The specials page includes a YouTube video in privacy-enhanced mode behind a click-to-play cover — nothing loads from YouTube until you choose to press play, and if you do, Google processes your viewing under its privacy policy without using it to personalize your YouTube experience.

The Site also links out to Facebook, TripAdvisor, GoFundMe and Google Maps. Once you leave the Site, those services’ own privacy policies apply.

The Site is operated from the United States for a U.S. audience, and anything you submit is processed and stored in the United States. We are a single ice cream shop in Maine: we do not market to, ship to, or specifically target visitors in other countries. If you visit the Site from abroad, you send us information at your own choice, and U.S. law applies to it.

If our practices change — a new form, a new tool, a new provider — this policy changes with them, and the “Last updated” date at the top changes too. Material changes will be noted prominently on this page. The date at the top is also this policy’s effective date.

For anything in this policy — questions, corrections, deletion requests: