Privacy Policy
Last updated: September 20, 2026
FromWitchCity publishes a newsletter and website about events, food, history and community life in Salem, Massachusetts. This page explains what we collect when you visit fromwitchcity.com or subscribe, who we pass it to, and how to opt out. We have tried to describe what actually happens rather than what is merely permitted.
What we collect
Your email address
We collect an email address when you give us one. There are four places on the site where that happens: the signup form in the footer and on the newsletter page, the timed popup, and the email prompt that appears when you add an event to your calendar. We record which of those you used, so we can tell which parts of the site are useful.
Email addresses go to Beehiiv, the service that runs our newsletter. We also tell Beehiiv that you came from fromwitchcity.com.
If you email us directly, we add you to the newsletter. We say so on the contact page before you write to us. Reply to any issue and ask, and we will take you back off.
Events you submit
If you submit an event, we store what you typed into the form: the title, date, time, venue, description, link and your email address. It goes into our Supabase database and a person reads it before anything is published. We use your email only to follow up about that submission.
Analytics and advertising
Unless you have opted out, four services run on this site:
- Google Analytics 4 records pages viewed, roughly where in the world you are, what kind of device you used and how you arrived. We have IP anonymization turned on, so Google truncates your IP address before storing it.
- Microsoft Clarity records how pages are used, including session replay. That means it captures mouse movement, scrolling and clicks, and can reconstruct a visit as a playback. Clarity masks text input by default, so what you type into a form should not appear in a recording. We use it to find confusing layouts.
- Meta Pixel tells Facebook and Instagram that a visit happened, and separately that a newsletter signup happened. We do this because we advertise on those platforms and need to know which ads work. Meta may connect this to your Facebook or Instagram account.
- OneSignal handles browser push notifications. Nothing is collected unless you grant your browser's notification permission. If you do, OneSignal stores a subscription identifier for your browser so we can send you a notification. It does not tell us who you are.
We do not run these on the newsletter landing page in the same way we do elsewhere, and we deliberately suppress the push notification prompt there.
Technical information
Our site is served by Cloudflare, which processes standard request information including IP addresses in order to deliver pages and block abuse. When you submit a form, we briefly use your IP address to limit how many submissions come from one place. We do not store it alongside your email.
The weather shown in the header comes from OpenWeather. That request is made by our server for Salem generally and carries nothing about you.
Cookies and your opt-out
We set no cookies of our own. The analytics and advertising services above set their own cookies and use similar browser storage.
A notice appears on your first visit. If you decline, we stop analytics and advertising for the rest of your visit and do not load them again on later visits from that browser. Because the notice appears after the page has begun loading, a small amount of activity may be recorded before you choose. Your choice is remembered in your browser's local storage, so it does not follow you to another browser or device, and clearing your browser data resets it.
You can also use your browser's cookie controls, Google's Analytics opt-out add-on, and your Facebook or Instagram ad preferences.
Who we share it with
We do not sell your personal information for money. We share it only with the services that make this site work: Beehiiv, Supabase, Cloudflare, Google, Microsoft, Meta and OneSignal, each for the purpose described above. We may also disclose information where the law requires it.
One thing worth stating plainly: under California law, letting an advertising pixel pass information to Meta may count as sharing for cross-context behavioral advertising even though no money changes hands. Declining the notice, or using the Global Privacy Control signal, stops it.
Your choices
- Every newsletter has an unsubscribe link in the footer.
- Decline the cookie notice to switch off analytics and advertising.
- Revoke notification permission in your browser to end push messages.
- Email [email protected] to ask what we hold about you, to correct it, or to have it deleted. We will action it within 30 days.
How long we keep things
We keep your email address until you unsubscribe or ask us to delete it. Event submissions are kept as part of our editorial record. Analytics data is kept according to each provider's own retention settings.
Children
This site is meant for adults. We do not knowingly collect information from anyone under 13. If you believe a child has given us an email address, write to us and we will remove it.
If you are in the EU or UK
We are based in the United States and our audience is local to Massachusetts, so we do not target the EU or UK. If you are there and have used this site, you still have the right to access, correct, delete, restrict or object to our use of your information, and to complain to your data protection authority. Email us and we will honor it.
Security
Pages are served over HTTPS and credentials for the services above are held as encrypted secrets, not in our published code. No site can promise perfect security, and we do not.
Changes
If we change what we collect, we will update this page and the date at the top of it.