Privacy notice
Jubilee is live event tracking software that municipalities use to show residents where a holiday vehicle — a Santa sleigh, an Easter Bunny, a parade float — is on a map. This notice covers what the software collects and why.
What we collect from residents
Viewing the public map requires no account and no sign-in. When you use it we process:
- Your approximate location, only if you press "My street". It is used in your browser to work out which neighborhood you are in and is not sent to us or stored.
- A one-way fingerprint of your IP address when you tap the interaction button or submit a photo. We store a keyed hash, not the address itself. It exists to stop one person inflating a counter or flooding the photo queue, and cannot be reversed to identify you.
- Photos you choose to submit, if the municipality has enabled submissions. See below.
- A push notification subscription, if you ask for alerts. This is an anonymous browser endpoint, not an identity.
- A phone number or email address, only if you enter one to receive alerts. Nothing is sent until you confirm it from that number or address.
Photographs
Photos submitted by the public are reviewed by a person at the municipality before anything appears publicly. Before storage, every image is re-encoded from its pixel data, which removes all embedded metadata — including GPS coordinates, device details and timestamps. We do this because photographs taken at community events often show children, and publishing geotagged images of children is not something we are willing to do by accident.
The municipality decides its own rules about who may submit and what is published. Ask them directly about a specific photo.
Vehicle location
Location comes from a device in a municipal vehicle, operated by a driver who knows they are being tracked. Positions are published publicly during the event and retained afterwards so the route can be replayed. This is vehicle tracking, not tracking of people watching the map.
Connected social accounts
A municipality may connect a Facebook Page, Instagram or X account so Jubilee can post event announcements. We store the access token the provider issues, encrypted, and use it only to publish posts that municipal staff have written or scheduled. We do not read private messages, follower lists or profile data, and we never post without an action by that municipality's staff or a schedule they set. Disconnecting an account in Jubilee deletes the stored token.
Staff accounts
Municipal staff accounts store a name, an email address, a password hash and, where required, an encrypted authenticator key. Privileged actions are recorded in an audit log so a municipality can see who changed what.
What we do not do
- We do not sell or share data with advertisers.
- We do not use third-party analytics or advertising trackers.
- We do not build profiles of people who view the map.
Where data lives
Data is stored on servers in the United States. Each municipality's data is isolated from every other municipality's at the database level.
Retention and deletion
Position history and photos are retained for the municipality that collected them until they delete them. To request deletion of something you submitted, see our deletion page or contact the municipality.
Contact
Email harrison@securenetfiber.com.