Privacy Policy
EFFECTIVE NOVEMBER 3, 2026
This policy explains what SeniorSite ("SeniorSite", "we", "us") collects when you use seniorsite.org, what we do with it, who else receives it and how long we keep it. It covers families researching care, people who write reviews or subscribe to the newsletter, and senior-living operators who claim or add a listing.
This version replaces the policy dated June 4, 2026. We rewrote it after checking every statement against how the site is actually built, so some things read differently than before. Where the earlier version described a practice we do not have, this one says what we do.
Who This Policy Applies To
Families and seniors who browse the directory and guides, ask for pricing, use the care concierge or the chat bubble, write reviews or subscribe to the newsletter. Operators who claim a listing, add a community that is not on the site, or pay for a subscription. Most of the policy applies to everyone; the operator sections apply only to operators.
What We Collect
California law asks us to describe personal information by category, so this section follows those categories. Within the last 12 months we have collected the following.
Identifiers and contact details. Your name, email address and phone number when you ask for pricing, chat with the care concierge, write a review, subscribe to the newsletter, send us a message, claim a listing or add a community. Operators also give us a work email, role, employer and the property they manage.
Details of your request. ZIP code or city, the type of care you are looking for, a move-in timeframe and anything you type into a message or notes field. For reviews: a star rating, the review text and the name or initials you choose to publish under.
Commercial information. For operators only: the plan you chose and your Stripe customer ID. Stripe handles your card; card numbers never reach our servers.
Internet and device activity. A shortened hash of your IP address when you submit a form or use the concierge (we hash the full address with SHA-256 and keep the first 16 characters, which cannot be turned back into the address). For add-a-community submissions we also keep the city, region and country that our hosting provider derives from your IP, plus your browser's user-agent string. Google Analytics, when it runs, records which pages you view; see [Cookies, analytics and ads](#cookies-and-tracking).
Geolocation. The "near me" button in some guides asks your browser for your location to build a map link. That happens in your browser. The coordinates are not sent to us and are not stored.
Sensitive information. The pricing notes, review text and concierge chat may contain health or care-needs details you choose to share (for example that a parent has dementia or needs help with daily tasks). We use those details only to route your request to the right community or partner and to answer you. We do not use them for anything else, and you can leave them out.
Inferences. We do not build profiles. The only thing we infer from your request is which communities or which partner should receive it.
Where It Comes From
Almost everything comes from you, through a form, the concierge chat or an email. Our hosting provider (Vercel) attaches your IP address and an approximate location to each request. Google Analytics, when it runs, collects page views in your browser. Listing details and historical reviews were imported from public sources when properties were first indexed, and nursing-home provider data comes from federal Care Compare records; neither of those is about you.
How We Use It
To send your pricing request to the community or partner that can answer it, to send the emails you asked for (confirmation links, magic-link sign-in for operators, newsletter issues, billing receipts), to moderate reviews and community submissions, to stop spam and abuse, to reply when you write to us, to count visits so we know which pages to improve, and to show display ads that pay for the site.
We do not use your information to train AI models, we do not sell email lists, and we do not build advertising profiles of our own.
Sale and Sharing
We do not sell personal information for money and have not in the last 12 months.
Google AdSense may show you personalized ads on our pages, which can mean Google uses its cookies to match ads to your activity. California law treats that as "sharing" for cross-context behavioral advertising. We have allowed it in the last 12 months. You can opt out for your device at Your Privacy Choices, and we honor the Global Privacy Control signal automatically. You will still see ads; they are just not personalized.
Pricing requests may be passed to the senior-living referral partner as described above. We do not pass them if you tick "Send to operators only", and California residents can opt out of that disclosure at any time, before or after submitting, by emailing privacy@seniorsite.org.
Operator Accounts
When you claim a listing we store your name, work email, role, employer, phone, any notes you add, the property, the plan you chose and your Stripe customer ID. Sign-in is by single-use magic link; there is no password. We keep subscription and payment records for as long as tax and accounting rules require, which is usually seven years after the last invoice.
To close your account or delete your claim, email contact@seniorsite.org. Subscriptions are cancelled from the operator dashboard or Stripe's customer portal.
Adding a community that is not on the site works the same way, with one extra step: we email you a confirmation link and only look at the submission after you click it. With the submission we store a hashed IP, the approximate location and browser details described above, so our team can spot bulk or fake submissions. Ninety days after a submission is approved, rejected or expires, we erase the hashed IP, city, region and browser details and keep only the country.
Reviews
A review is published under the name or initials you choose, after you confirm it by email and we check it. Your email address is never shown. Operators with a subscription can post a public reply under your review, attributed to the community. Reviews stay up until you ask us to take yours down; email reviews@seniorsite.org.
The Care Concierge and the Chat Bubble
The care concierge at /get-matched is our own tool. Each message you send, along with the conversation so far, goes to Google's Gemini API to generate the reply. We do not store the conversation. If you give the concierge your name, email and phone so it can send a pricing request, that request is saved and handled exactly like a Get Pricing form, including the choice about the referral partner.
The chat bubble in the bottom corner of most public pages is run by SilverAssist, not by us. Anything you type there goes to SilverAssist.
How Long We Keep It
Pricing requests, including ones sent through the concierge: until the request is resolved and for 24 months after, so we can answer follow-up questions and confirm what was sent where.
Newsletter subscribers: until you unsubscribe, after which we keep the address marked unsubscribed.
Reviews: until you ask us to remove yours. Your confirmation email stays attached to the review so we can verify a removal request.
Operator claims and accounts: for the life of the relationship, and payment records for as long as tax and accounting rules require.
Community submissions: the submission itself for as long as the listing it created exists; the hashed IP, location and browser details for 90 days after a decision, as described above.
Email delivery events (delivered, opened, bounced): for as long as the message they describe could still need troubleshooting. We do not delete them on a fixed schedule; if you ask us to delete your information, these go too.
Rate-limit records (a hashed IP and a timestamp, used to stop floods of requests): nothing reads them after the window they protect, which is at most 30 days. They are not deleted on a fixed schedule and contain nothing that identifies you on its own.
Contact form messages: we do not keep them in a database. They are emailed to us and live in our mailbox.
Google Analytics: 14 months. Hosting logs at Vercel: around 30 days, under Vercel's retention rules.
Your California Rights
If you live in California, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to know what personal information we have about you and how we use and share it, to get a copy of it, to have it deleted, to correct it, to opt out of any sale or sharing of it, to limit our use of sensitive information to what is needed to provide the service you asked for, and not to be treated differently for exercising any of these rights. We will not deny you service, charge a different price or lower the quality of what you get because you made a request.
To make a request, email privacy@seniorsite.org or use the contact form with the topic "Privacy request". Tell us which right you want to use and the email address you used on the site.
To check that the request really comes from you, we match it to the email address on file and may send a confirmation link to that address. For a deletion or correction we may ask for one more detail from the record, such as the community you asked about or the approximate date. We do not ask for identity documents. We will confirm that we received your request within 10 business days and answer within 45 days. If we need longer, we will tell you why and when to expect an answer, up to a further 45 days.
You can have someone make a request on your behalf. Ask them to email privacy@seniorsite.org with your written permission, or a copy of a power of attorney, and we will confirm the request with you at the email address on file before acting on it.
To opt out of ad personalization, use Your Privacy Choices or turn on Global Privacy Control in your browser. To opt out of the referral-partner disclosure, tick "Send to operators only" when you submit, or email us at any time.
Global Privacy Control and Do Not Track
If your browser sends the Global Privacy Control (GPC) signal, we treat it as an opt-out of both analytics and ad personalization for that browser: the Google Analytics script does not load, and we ask Google AdSense for non-personalized ads. No account or action on your part is needed. GPC does not stop the SilverAssist chat bubble or lead forms from loading, and it does not change how a pricing request you choose to submit is routed; use the checkbox or email us for that.
We do not respond to the older Do Not Track (DNT) browser header. There is no agreed standard for what it should mean, so we rely on GPC and the controls on this site instead.
Children
The site is for adults arranging care. We do not knowingly collect personal information from anyone under 13, and we do not sell or share the personal information of anyone we know to be under 16. If you believe a child has sent us information, email privacy@seniorsite.org and we will delete it.
Shine the Light
California Civil Code section 1798.83 lets California residents ask once a year which third parties received their personal information for those parties' own direct marketing. Apart from the referral-partner disclosure described above, which you can opt out of, we do not give your information to anyone for their own direct marketing. If you want written confirmation of that, email privacy@seniorsite.org with "Shine the Light" in the subject line.
Security
Traffic between your browser and our servers is encrypted with HTTPS. Public forms use Cloudflare Turnstile, a bot check that does not rely on tracking cookies. Operator sign-in uses single-use, time-limited magic links, so there are no passwords to leak. Card details go straight to Stripe. Our database provider encrypts backups at rest, and only staff who need access to a record have it. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.
Visitors Outside the United States
SeniorSite is run from the United States and its directory covers US communities. If you visit from elsewhere, your information is processed in the US, where privacy law may differ from your country's. Visitors in the EU, UK and similar regions see the Cookiebot consent dialog on their first visit. On this site the dialog records your choice but does not block the analytics, ads or lead tools described above. To turn off analytics and personalized ads, use Your Privacy Choices.
Changes to This Policy
When our practices change, we update this page and change the effective date at the top. If a change matters to how your information is used, we add a short note at the top of the page describing it. We do not email about policy updates.
Contact
Privacy questions and California requests: privacy@seniorsite.org. General questions, operator support and account closures: contact@seniorsite.org. Review removals: reviews@seniorsite.org. Billing: billing@seniorsite.org. You can also use the contact form. A person reads every message.