Who is responsible
The controller of personal data processed through indexcly.com is the United Auburn Indian Community, 1200 Athens Avenue, Lincoln, CA 95648, United States. Privacy questions go to privacy@indexcly.com.
What we collect
- IP address of each device that loads a page, which the web server notes in its access log.
- Approximate geolocation worked out from that IP address — roughly a country or a city, never a street or GPS point.
- User agent — the browser, version and operating system your device reports — together with the page requested, the referring page and a timestamp.
- Contact-form data — your name, email, topic and message, which reach us only when you send the email draft the form prepares.
- Your cookie choice, saved in your own browser.
Why we use it
- Keeping the index online — serving pages, blocking abuse and tracing faults. Legal basis: legitimate interests.
- Analytics — counting visits and seeing which cards are read, in aggregate. This runs only once you have said yes.
- Marketing and affiliate credit — so a partner or affiliate network can recognise that a reservation began from one of our buttons. This too waits for your yes.
- Replying — handling messages you choose to send us.
Who receives data
Recipients fall into three groups: the companies that host and secure the site; an analytics provider, if you switched analytics on; and partner and affiliate networks, when you follow a referral link with advertising cookies allowed. Some of them process data in the United States or other countries outside your own. Where data-protection law calls for it, those transfers are covered by approved mechanisms such as the European Commission's model clauses. The hotel sites our buttons open apply their own privacy terms. We do not sell lists of visitors.
Retention periods
- Access logs: deleted after 90 days at most, except where a specific security incident needs them.
- Emails: removed two years after the last message in a thread.
- Cookie choice: held locally on your device until you change or clear it, and the banner asks again after a year.
If European or UK GDPR covers you
Where European or UK data-protection law covers you, these rights apply: to obtain a copy of whatever personal data relates to you, to have it corrected or erased, to restrict or object to how we use it, and to receive a portable copy. Consent you gave can be taken back whenever you like, which stops future processing. Your national regulator for data protection accepts complaints too.
California: CCPA/CPRA rights
Residents of California are entitled to learn which categories of personal information we hold and for what purpose, to have it deleted or corrected, and to say no to it being sold or shared for advertising that follows people from site to site. Choosing Reject All, or turning off Advertising / affiliate under Manage cookies, opts you out straight away, and we treat a Global Privacy Control signal the same way. Nobody gets a worse version of the index for using them.
Minors
This index is written for adults, 18 and older. If we learn that someone younger has sent us personal details, we erase them; tell us if you think that has happened.
Security and updates
Pages are served over HTTPS and access to logs and mailboxes is limited to the people who need it. When this statement changes, the revision date below changes with it.
Making a request
Email privacy@indexcly.com or post your request to United Auburn Indian Community, 1200 Athens Avenue, Lincoln, CA 95648, United States. Before acting we may ask you to confirm who you are.
Last revised: October 2026