The short version
- We collect your name, email address, optional mobile number, and which home you live in — because that is what it takes to reach you and to know you belong here.
- We do not use advertising, analytics, or third-party tracking of any kind. There is no tracking cookie on this site.
- Your details are visible to the association's administrator. They are never sold, and never shared outside the association except with the services listed below that are needed to make the site work.
- To see, correct, or delete what we hold, email admin@foxhalltroy.com.
Who this is
This site is operated by the Fox Hall Homeowners Association, a residential community association in Troy, Michigan, serving the 224 homes of the Fox Hall subdivision. Contact: admin@foxhalltroy.com.
What we collect, and why
When you register your household
You provide your name, an email address, and — if you choose — a mobile number. You also tell us which home you live in and whether you own, co-own, or rent it. You may add a note.
Your email address is how sign-in codes reach you. Your mobile number is optional; it is stored so that text-message delivery can be offered once that is available, and is not used for anything else. Knowing which home you live in is what lets the association confirm you are a resident.
When the association records your household
The administrator may add or correct contact details on your behalf — for example after a sale, or when a neighbour passes on a correction. The same information is held either way.
When you sign in
We store a session record so the site remembers you between pages. It holds only a hashed token, never a password — this site has no passwords at all. One-time sign-in codes are stored hashed, expire after ten minutes, and can be used once.
When you post to the neighbourhood feed
Your post text, any photos, and the time are stored. Posts are attributed by first name and street only — never your house number. Photos are resized in your own browser before upload and location and camera EXIF data are stripped at that point, so we never receive them.
Technical information
When you submit the registration or sign-in form we store a one-way hash of your IP address — enough to notice one source flooding the form, and not enough to reconstruct a record of who visited. Cloudflare, which hosts the site, keeps its own short-lived edge logs as part of delivering and protecting it.
Cookies
One cookie, fh_session, set only after you sign in. It keeps you signed in for
up to 30 days and is marked HttpOnly and SameSite=Lax, so it cannot
be read by scripts or sent from another site. It is strictly necessary for the site to
function.
There are no analytics, advertising, or tracking cookies. Nothing on this site profiles you or follows you elsewhere. That is why you are not asked to accept cookies — there is nothing optional to accept.
Who else sees your information
Only the services required to run the site. Each sees only what its job needs:
| Service | What it handles |
|---|---|
| Cloudflare | Hosting, the database, file storage, and the anti-bot check on our forms. Everything on this site is stored on Cloudflare's infrastructure. |
| Microsoft | Sends sign-in code emails from admin@foxhalltroy.com. Receives your email address and the code. |
| Twilio | Will send sign-in codes by text once that is available. Would receive your mobile number and the code. Not in use today. |
| Stripe | Will process online dues payments when that launches. Card details would go directly to Stripe and are never stored by us. Not in use today. |
We do not sell your information, and we do not share it with anyone else — no marketing lists, no data brokers, no other associations. Information may be disclosed if the law requires it.
How long we keep it
Contact details are kept while you live here. When you move, your record is marked as a former resident rather than deleted, and the association keeps the history of who owned which home and when. That record matters for dues and ownership questions long after someone leaves, and it is the same information already in the county's public deed records.
Sign-in codes expire in ten minutes. Sessions expire after 30 days. Changes made by the administrator are recorded in an internal audit log so the association can account for them.
Your choices
- See what we hold. Ask and we will tell you.
- Correct it. Anything wrong will be fixed.
- Remove it. We will delete your contact details on request. Note that doing so ends your ability to sign in, and that ownership history connected to your home may be retained as an association record.
- Remove a post. Ask and it will be taken down.
- Give less. A mobile number is optional. An email address is required, because it is the only way to send you a sign-in code.
Email admin@foxhalltroy.com for any of these.
Children
This site is for adult residents and homeowners. We do not knowingly collect information from children.
Security
There are no passwords to steal, and no card details are stored. Sign-in codes and session tokens are stored hashed. Access to a home's information requires proving control of the contact address on file for it.
No system is perfectly secure, and we will not pretend otherwise. If you believe your account or information has been misused, email admin@foxhalltroy.com.
Changes
If this policy changes in a way that matters, the date at the top will change and residents will be told through the site.