Privacy notice
Jubilee is live event tracking software that municipalities use to show residents where a holiday vehicle — a Santa sleigh, an Easter Bunny, a parade float — is on a map. This notice covers what the software collects and why.
What we collect from residents
Viewing the public map requires no account and no sign-in. When you use it we process:
- Your approximate location, only if you press "My street". It is used in your browser to work out which neighborhood you are in and is not sent to us or stored.
- A one-way fingerprint of your IP address when you tap the interaction button or submit a photo. We store a keyed hash, not the address itself. It exists to stop one person inflating a counter or flooding the photo queue, and cannot be reversed to identify you.
- Photos you choose to submit, if the municipality has enabled submissions. See below.
- A push notification subscription, if you ask for alerts. This is an anonymous browser endpoint, not an identity.
- A phone number or email address, only if you enter one to receive alerts. Nothing is sent until you confirm it from that number or address.
Photographs
Photos submitted by the public are reviewed by a person at the municipality before anything appears publicly. Before storage, every image is re-encoded from its pixel data, which removes all embedded metadata — including GPS coordinates, device details and timestamps. We do this because photographs taken at community events often show children, and publishing geotagged images of children is not something we are willing to do by accident.
The municipality decides its own rules about who may submit and what is published. Ask them directly about a specific photo.
Vehicle location
Location comes from a device in a municipal vehicle, operated by a driver who knows they are being tracked. Positions are published publicly during the event and retained afterwards so the route can be replayed. This is vehicle tracking, not tracking of people watching the map.
Connected social accounts
A municipality may connect a Facebook Page, Instagram or X account so Jubilee can post event announcements. We store the access token the provider issues, encrypted, and use it only to publish posts that municipal staff have written or scheduled. We do not read private messages, follower lists or profile data, and we never post without an action by that municipality's staff or a schedule they set. Disconnecting an account in Jubilee deletes the stored token.
Staff accounts
Municipal staff accounts store a name, an email address, a password hash and, where required, an encrypted authenticator key. Privileged actions are recorded in an audit log so a municipality can see who changed what.
Counting visitors
To tell a municipality how many people followed its event, Jubilee counts visits to its map. It does this without cookies and without storing your network address. Each visit is turned into an anonymous code made from your network address and browser type together with a key that changes every day, so the same person cannot be recognised from one day to the next, and the code cannot be turned back into an address. The codes exist only so that reloading the map is not counted twice, and are deleted within two days. After that, only totals remain -- for example "1,200 visitors on Saturday" or "340 people watching at 7:40 pm".
Live video
A municipality may stream an event on Facebook and show a "Watch live" button on its map. Nothing is loaded from Facebook unless you press that button. If you do, the video is played by Facebook, which may set its own cookies and collect information under Facebook's privacy policy. Closing the video stops it.
What we do not do
- We do not sell or share data with advertisers.
- We do not use third-party analytics or advertising trackers. The only third-party content is a Facebook live video, and only if you press Watch live.
- We do not build profiles of people who view the map.
Where data lives
Data is stored on servers in the United States. Each municipality's data is isolated from every other municipality's at the database level.
Retention and deletion
Position history and photos are retained for the municipality that collected them until they delete them. To request deletion of something you submitted, see our deletion page or contact the municipality.
Contact
Email harrison@securenetfiber.com.