Privacy Policy
Last updated: June 5, 2026
This page explains what data Back Forty collects, what we do with it, and what we don’t do with it. Plain language, no dark patterns. If you have a question that isn’t answered here, email us.
What we collect
- Visitor logs (via Cloudflare): IP address, browser/device type, pages visited, timestamps. These are standard web server logs used for security and operational debugging.
- Map interactions: pin coordinates you drop on the Back Forty map (latitude/longitude), search queries you enter (e.g., “Mason, TX”), and county selections.
- Server-side API call logs: which prediction endpoints were called, with what parameters, and when. Used for operational monitoring and debugging.
- Authentication cookies: during the current early-access period, Cloudflare Access uses cookies to verify that you’re authorized to view the app. No analytics cookies, no tracking cookies, no advertising cookies.
What we do not collect
- Personal identifying information beyond what Cloudflare’s default logs capture (name, address, phone number, etc.).
- Email addresses, unless you contact us — in which case we use your email to reply, and that’s it.
- Payment information. Back Forty is free during early access; no payment processing exists.
- User accounts or profiles. None exist at this time.
- Health information, biometric data, or location history beyond the pins you intentionally drop on the map.
Third parties we share data with
Back Forty uses the following third-party services, each of which may receive limited data in the course of operations:
- Cloudflare — content delivery, DDoS protection, and Access authentication. Cloudflare receives visitor IP addresses and browser metadata.
- Nominatim / OpenStreetMap — address geocoding. When you type a search query, that text is sent to Nominatim to convert addresses into coordinates.
- DigitalOcean — server infrastructure. Server logs are stored on DigitalOcean’s platform.
These third parties have their own privacy policies and data handling practices. Back Forty does not control how they process information passed to them in the course of fulfilling your requests.
What we will not do
- We will not sell your data.
- We will not run advertising or share data with advertisers.
- We will not share your pin coordinates or search queries with third parties beyond what is required to deliver the service.
- We will not enroll you in marketing email lists. If you email us, your address is used to reply — not added to a list.
Data retention
Server logs and API call logs are retained for a maximum of 90 days for operational and security purposes, after which they are deleted. Pin coordinates and search queries are not stored long-term — they exist only in your active browser session and are not retained server-side after you close the tab. Back Forty does not currently offer a way to save, bookmark, or share specific pins; if we add that feature, this policy will be updated accordingly.
Your rights
If you’d like us to delete any record of your interactions with Back Forty, email us at txruralland@proton.me from the address you used to access the service, and we’ll comply within a reasonable timeframe (typically within 14 days).
Changes to this policy
If we change how we handle data, we’ll update this page and update the “last updated” date at the top of this page.