Privacy Policy

Effective November 2, 2026

This page says what GetLocalEggs.com, operated by Flipvo, LLC, collects, who sees it and what stays private. We never sell your information.

If you're looking for eggs

Searching needs only a zip code. We use it to measure distance to farms and don't tie it to you. To see where buyers find too few farms, we note each search: the zip, the distance and the delivery box you picked, how many farms it found, and the day. Nothing that says who searched: no account, IP address, device or time of day. We delete these notes after 12 months.
Farm pages and search results: a farm sees daily counts of how many times its page was opened, how many searches listed it, how many requests it got and how many people saved it, with nothing about the visitor stored. We delete the counts after 12 months.
Your account: your name, email and password (stored scrambled, never readable). You need one to send a request. We keep it, and the requests you sent, so you can see where each one stands. We confirm your email before any request reaches a farm.
Signing in with Google is optional, for buyers and farms alike. If you choose it, Google tells us your name, your email address and whether Google has confirmed that address, and we keep the ID Google uses for your account so we know you next time. We never see your Google password, and we get nothing else from your Google account.
Signing in with Facebook is optional too, for buyers and farms alike. If you choose it, Facebook tells us your name and, if you let it, your email address, and we keep the ID Facebook gives you for our site so we know you next time. We never see your Facebook password, we get nothing else from your Facebook account, and we never post to Facebook for you. If Facebook doesn't share an email address, we don't make an account with it. To have what Facebook told us deleted, delete your account in your account settings, or email hello@getlocaleggs.com from the address on your account and we will delete it for you. Either way your Facebook ID goes with the account. Removing our site under "Apps and websites" in Facebook's settings stops Facebook telling us anything more.
A pickup request sends the farm your name, email, optional phone number, note and what you asked for, so it can answer you. We email you a copy and the farm's reply, and we get a copy ourselves to keep spam out and the service working.
Your own phone number is optional. You can give it when you list your farm or add it in Settings → Privacy, and we use it to reach you about your listing. A farm sees it only on a request from you, and only while you have chosen to share it. It is never on a public page, in a review or in a message. We delete it when you delete your account.
A review you write after a pickup keeps your star rating, your words if you wrote any, and the farm and request it belongs to. It shows your first name and the first letter of your last name ("Jane D."), the month and year, and nothing else about you. You can edit it for 14 days and delete it at any time. If you delete your account, the review stays and shows you as "Former buyer", with your rating and words unchanged. Delete a review first, from its request page, if you want it gone.
A pickup mark is a private note a farm can make on your request: picked up or no-show. Farms see it only as a count across farms for the last 12 months, such as "8 pickups, 1 no-show", and only once you have 3 or more, otherwise "New buyer". It is never public and no other buyer sees it. You can see your own line under My requests. Email us if one looks wrong.
A message to a farm keeps your words, the farm and the time, and the farm's replies. It is private to you and that farm: the farm sees your name and what you wrote, never your email or phone number unless you write them in the message, and no one else sees it. It is never public. A message carries no pickup address, and a farm can block you, after which what you send is stored but the farm never sees it. We email the other side a notice of a message, never more than one per conversation every 10 minutes. A buyer's first message to a farm is copied to us so we can keep the directory safe. If you delete your account, your name is removed from your conversations, which stay with the farm with your words unchanged and read "Former buyer", and take no more messages.
A Wanted post keeps your zip code, how many eggs you want, once or every week, and when you posted it. Farms within 25 miles of that zip code can see it when signed in to their own account, with your first name and the first letter of your last name, your town, how far it is from them, what you want and how long ago you posted it. They never see your exact place, your email or your phone number. We email those farms a daily list of new posts that carries the same lines and nothing more, and we get a copy of each new post with the zip, town, eggs and how often, but not your name or email. It is never on a public page and we don't use it for anything else. If a farm writes to you about it, that is a message, kept as above. A post closes by itself 30 days after you post or renew it, and no farm sees it after that. You can close it sooner, and it stays under My requests until you delete your account, which deletes your posts.
"Tell me when you open", on an egg-law page outside the US, keeps your email address and the place of the page you were on, and the day. We keep no name, no IP address and no account for it. We use it for one thing: we email you once, when we open there. Nothing else is sent to that address and we don't share it. That email has an unsubscribe link. We keep it until we have sent that email. A sign-up that looked automated is never emailed, and we delete it when we open there. Email hello@getlocaleggs.com from that address to have it deleted.
"Tell me when a farm posts near here", on a zip answer with no eggs, keeps your email address, the zip and the distance, and the day. We keep no name, no IP address and no account for it. We first email you a link to confirm it, and send nothing else until you do. Then we email you once, when a farm near that zip posts eggs. We don't share it. Each email has an unsubscribe link. We keep it until we have sent that email, and delete it if you don't confirm within 7 days or no farm has posted within 90 days of your confirming. A sign-up that looked automated is never emailed. Email hello@getlocaleggs.com from that address to have it deleted.

If you sell eggs

Your account: your name, email and password (stored scrambled, never readable).
Your farm's page: what you choose to show publicly, such as your farm's name, town, photos, links, what you have today and your permit status.
Your pickup address is private. The directory shows your town and a rough map pin. The exact address is shown only to a buyer whose request you accept, and only until that pickup day is over.
A permit number or document, which you give or upload so your listing can say "Permit on file". Neither is shown publicly. If you list as exempt, we also keep the date you confirmed you've read your state's rules.
Reviews of your farm are public while your farm is listed, with the reviewer's first name and last initial, and your reply if you write one. We keep a review for as long as your farm exists, including one an admin has hidden, which stays on record as a hidden review. The private pickup mark and note you make on a request stay on that request. Other farms see only a buyer's count across farms, never your mark, your note or your name.
Messages with buyers are private to you and the buyer. You see a buyer's name and what they wrote, never their email or phone number unless they put it in the message. We email you a notice when a buyer writes. If you delete your account, your farm's conversations are deleted with it.
Wanted posts near you are the buyers' wishes within 25 miles of your farm: a first name and last initial, a town, a distance, how many eggs and how often. Only you see them, signed in, and you never get a buyer's email, phone number or exact place from one. We email you a daily list of new ones, which you can switch off in Settings → Notifications.
Your ledger: the sales you record. Only you see it.
Billing: your subscription is handled by Stripe. Stripe collects your card details; we never see or store your full card number.

If you contact us

We keep your name, email, optional phone number and message so we can reply.

Cookies and analytics

We use a session cookie to keep you signed in and a security cookie that protects forms. On public pages we use Google Analytics to count visits and see which pages are useful, which sets its own cookies. It is not used on account pages, and we don't run advertising or ad tracking.

When you create an account, we tell Google Analytics that a sign-up happened, whether it was a farm or a buyer and how you sign in, using only the Google Analytics cookies already in your browser. We never send your name, email, zip or page address. If those cookies aren't there, or you chose No in our cookie notice, we send nothing.

On our egg-law pages outside the US we ask first. Google Analytics and its cookies load only after you choose Yes in the cookie notice at the top of the page. No turns it off, on every page of this site, including our US pages. Either way, a cookie remembers your answer. We keep your choice in one cookie of our own for a year, and "Cookie settings" at the foot of those pages lets you change it.

If you arrive from a link with a campaign tag, we keep that tag on your account to see which places bring sellers.

Keeping spam out

Our forms use a hidden trap field, a timing check and rate limits. When a check flags a form as sent by a bot, we write its IP address and browser string to our server log, so we can block a flood of fake posts from the same place. Our server logs are deleted after 14 days.

Where it is switched on, a message sent through our contact form and an email sent to us are checked for spam by My Site Handled, the company that manages this website for us, using Anthropic's AI model, before we read them. The check reads the message and its subject together with the sender's name, email address and phone number. My Site Handled keeps the sender's name and email address, the subject and the message for 30 days, where only its own staff can read them, and never keeps the phone number. It keeps the email address and its domain of a sender found sending spam for as long as that sender stays blocked, so it can catch the next one. A message found to be spam is kept aside for us to review and deleted after 30 days, and a repeat from the same sender may be discarded. Requests, reviews and messages between buyers and farms, and messages from your account to us, are not checked.

Listings built from open data

Some listings that no farm has claimed yet are built from OpenStreetMap. That data is © OpenStreetMap contributors, available under the Open Database License (ODbL). The OpenStreetMap-derived data behind those listings is available under the Open Database License (ODbL) on request: email hello@getlocaleggs.com.

Who helps us run the site

Amazon Web Services hosts the site and its files. Stripe handles farm subscriptions. An email delivery service sends our emails. Google Analytics counts visits, Google signs you in if you choose "Continue with Google", Meta signs you in if you choose "Continue with Facebook", and Sentry reports errors so we can fix them. My Site Handled, the company that manages this website for us, screens messages for spam using Anthropic's AI model, as described under "Keeping spam out" above. Each gets only what it needs for that job.

How long we keep it

We keep an account and its records while the account exists. A review stays as long as the farm it is about, hidden ones included, and a report on a review is deleted 12 months after we resolve it. We keep requests for as long as they are useful to the buyer and farm involved, search notes for 12 months, and billing records as long as tax law requires. We delete a conversation 24 months after its last message, held and blocked ones included. A Wanted post closes 30 days after it is posted or renewed and is deleted with your account. Delete a review from its request page before deleting your account if you want the review, its words and its rating removed.

Your choices

Email hello@getlocaleggs.com to ask what we hold about you or to correct it. You can change your name, email or password, or delete your account, in your account settings. If you delete your account first, any review you have not deleted from its request page stays with its words and rating and shows "Former buyer", and your conversations stay with their farms under the same name. A farm can edit its page and export its ledger at any time.

If you're in the UK, the EU, Canada, Australia or New Zealand

This part adds to the rest of this page for people who live in one of these places.

Who is responsible

Flipvo, LLC decides how your information is used here and is responsible for it. It is a US company. Write to hello@getlocaleggs.com about anything on this page.

Why we use it

Your account, your farm's page, requests, reviews, messages, Wanted posts and the ledger: to give you the service you signed up for. This is our contract with you. Without your name and email we can't make an account, and without an account you can't send a request.
"Tell me when you open" and Google Analytics on our egg-law pages outside the US: your consent. You can withdraw it at any time. "Cookie settings" at the foot of those pages turns Google Analytics off, and an email to us from the address you gave removes it from the list. Our pages for places in the US don't ask first, as "Cookies and analytics" above says, but a No holds on them too.
Keeping spam, bots and abuse out, as "Keeping spam out" above describes, and the copies of requests and messages we get to keep the directory safe: our legitimate interest in keeping the site, and the people who use it, safe.
Billing records, which we keep as long as US tax law requires: our legitimate interest in following the law that applies to us as a US company.

How long we keep each kind of information is under "How long we keep it" above.

What you can ask

You can ask us to show you the information we hold about you and give you a copy, correct it, delete it, limit how we use it, give it to you in a form you can take elsewhere, or stop using it. Where we rely on your consent you can withdraw it at any time; that doesn't undo what we did before. Email hello@getlocaleggs.com, from the address on your account if you have one. Some records we may still have to keep, such as billing records.

Where your information is kept

We store your information in the United States, and the companies that help us run the site handle it there. Each one's own data protection terms say how it protects information from the UK and the EU:

Amazon Web Services (hosting and files): the EU's standard contractual clauses, with the UK's addendum to them for information from the UK.
Stripe (farm subscriptions): the EU-US Data Privacy Framework and its UK extension, and otherwise the EU's standard contractual clauses or the UK's addendum.
Resend (sending and receiving our email): the EU's standard contractual clauses and the UK's addendum to them. It also names the Data Privacy Framework and its UK extension.
Google (Google Analytics, and "Continue with Google" if you choose it): the Data Privacy Framework and its UK extension, and otherwise the EU's standard contractual clauses with the UK's addendum. For "Continue with Google", Google is responsible for its own use of your information.
Meta ("Continue with Facebook" if you choose it): Meta is responsible for its own use of your information, under its own privacy policy. We send it nothing but your choice to sign in with Facebook.
Sentry (error reports): the Data Privacy Framework and its UK extension, and otherwise the EU's standard contractual clauses with the UK's addendum.
My Site Handled (spam screening) is in the US and uses Anthropic's AI model, whose terms use the EU's standard contractual clauses with the UK's addendum.

Where to complain

Tell us first, at hello@getlocaleggs.com, and we will try to put it right. You can also complain to your own regulator:

The UK: the Information Commission, the UK's data protection regulator, at ico.org.uk.
The EU: the data protection authority in the country where you live or work, or where you think the problem happened, listed by the European Data Protection Board.
Canada: the Office of the Privacy Commissioner of Canada, at priv.gc.ca. Because your information is stored in the United States, it may be accessed by the courts, law enforcement and national security authorities there.
Australia: the Office of the Australian Information Commissioner (OAIC), at oaic.gov.au, if we haven't answered your complaint within 30 days or you're unhappy with our answer. The companies above that receive your information are all in the United States.
New Zealand: the Privacy Commissioner, at privacy.org.nz, once you have raised it with us. You can ask us for, and correct, the information we hold about you.

Children

The site is for adults. We don't knowingly collect information from children under 13.

Changes to this policy

If we change what we collect or who sees it, we'll update this page and the date at the top.

Contact

Questions about your privacy: hello@getlocaleggs.com, or the contact page.