Cookie & privacy choices

We use necessary browser storage to remember your privacy choices. With your permission, we also load Vimeo videos and Google Maps. These providers receive your IP address and device information and may use cookies or similar technologies. Rejecting optional content does not prevent you from using the rest of this site.

What we store and load

• Necessary: “pappas-privacy-choice” in your browser’s local storage holds your category choices, policy version, expiration, and latest consent receipt. It expires after 180 days, or sooner if you clear site data or the policy version changes.
• Vimeo videos (optional): off by default. When enabled, video players connect to Vimeo, which receives network and device information and may use cookies or local storage. We request Vimeo’s do-not-track mode, but this does not eliminate all provider processing. See Vimeo’s privacy policy.
• Google Maps (optional): off by default. When enabled, the map connects to Google, which receives network and device information and may use cookies or similar storage. See Google’s privacy policy.

This site’s consent system does not load advertising or analytics tags. Fonts and our own images and videos are served by this website without requiring optional consent. External links take you to sites with their own policies.

Your choices

Accept all optional content, reject it, or select videos and maps separately. Rejecting is as easy as accepting. Closing preferences without saving does not grant permission. The “Cookie settings” link in the footer is always available. Withdrawal stops further embedded-player and map requests; it cannot undo data already received by those providers or delete their third-party cookies. You can remove those through your browser settings.

We conservatively keep both optional categories blocked when your browser sends Global Privacy Control. If browser storage is unavailable, preferences last only for the current page session. If recording fails, optional content remains blocked and a retry message is shown.

Consent records

Our server records accept, reject, and saved-preference actions with a random event ID and receipt ID, server timestamp, policy version, the notice and category descriptions shown, chosen categories, and whether Global Privacy Control was enabled. These records are not linked to your name or email. You can download your latest confirmed receipt in Cookie settings.

Audit files are stored outside the public website directory for up to 365 days, with expired files removed during the next consent-recording request. Authorized hosting administrators can access them. For abuse prevention, a daily salted hash derived from the connecting IP is used in an hourly rate-limit counter; the consent audit itself does not store your IP address. Hosting infrastructure may maintain separate access or security logs under the hosting provider’s policies.

Records include a hash chain to help detect changes when compared against retained receipts or backups. They are not independently notarized or immutable, and cannot establish a visitor’s identity. Optional content is enabled only after the server confirms the record.

Contact

The Pappas Company, 12 Bridge Street, Watertown, MA 02472. For questions about privacy choices or consent records, email info@pappasco.com or call (617) 923-3000. Include the receipt ID, if available; do not send sensitive personal information.