Privacy Policy

Effective September 15, 2026 · Applies to brand.welcometomountaincity.com

This Privacy Policy describes how Visit Salt Lake ("we," "us," or "our") collects, uses, and shares information when you use the America's Mountain City™ Brand Guide at brand.welcometomountaincity.com (the "Site"). It applies only to this Site. Other Visit Salt Lake websites and services have their own privacy notices.

1. The short version

We do not use advertising cookies, and we do not sell your personal information.
Browsing the Site is anonymous apart from ordinary server logs and cookieless, aggregated analytics.
The only time we ask for personal information is when you download a brand asset. You must accept a license and provide your name, organization, and work email so we have a record of who licensed what, and when.

2. Information we collect

2.1 Information you provide

When you download a brand asset, the license dialog asks for your first name, last name, company or organization, and work email address, together with your confirmation that you accept the Asset License Terms. We record those details along with the asset you downloaded, its license category, the version of the terms you accepted, and the date and time.

2.2 Information collected automatically

When you accept a license or download an asset, our server also records your IP address, browser and device information (user agent), the page that referred you, and the time of the request. Like most websites, our hosting provider keeps standard server request logs (IP address, requested URL, user agent, and timestamp) for all visits, which we use for security and troubleshooting.

2.3 Analytics

We use Cloudflare Web Analytics to understand how the Site is used. It is designed to be privacy-first: it does not use cookies or local storage, does not fingerprint your device, and does not track you across other websites. We see aggregated metrics such as page views, referrers, countries, and browser types.

2.4 Information stored in your browser

The Site does not set cookies. After you download an asset, the Site saves a small receipt in your browser's local storage (the asset name, license category, date, and terms version) so the record is visible to you. It contains no name, email, or other personal information and never leaves your browser. You can clear it at any time through your browser's site-data settings.

2.5 Information we do not collect

We do not collect payment information, government identifiers, precise location, or sensitive personal information, and we do not knowingly collect information from children under 16. The Site is intended for business and professional use.

3. How we use information

To grant, record, and administer licenses to brand assets, including keeping proof of acceptance, tracking license terms and expiry, and contacting you about the assets you licensed (for example, if the terms change, a license expires, or we identify a misuse).
To enforce access restrictions. For example, the brand typefaces are available only to Visit Salt Lake staff, which we check by email domain.
To operate, secure, and improve the Site, including preventing automated abuse and fraudulent downloads, troubleshooting, and understanding aggregate usage.
To comply with legal obligations and to protect our rights, our licensors' rights, and the rights of others.

We do not use your information for advertising, and we do not sell it or share it for cross-context behavioral advertising.

4. Legal bases (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following bases: performance of a contract (the Asset License you accept); our legitimate interests in operating a secure website, protecting our brand and intellectual property, and maintaining license records; and compliance with legal obligations.

We share personal information only as described here:

Service providers that process it on our behalf and under contract: Airtable (the database where license records are stored); Cloudflare (network and security services, storage for brand asset files, and Web Analytics); Railway (application hosting and server logs); and jsDelivr (a content delivery network that serves open-source scripts used by the Site, whose servers receive your IP address and browser information when a page loads, as any web host would).
Within Visit Salt Lake, with staff and contractors who administer the brand, and with our licensors (for example, photographers or agencies) where needed to confirm that an asset is being used within its license.
Legal reasons, when required by law, legal process, or a government request, or to protect the rights, property, or safety of Visit Salt Lake, our users, or the public.
Organizational changes, in connection with a merger, reorganization, or transfer of assets, in which case the successor will be bound by this Policy.

6. Data retention

We keep license records (your name, organization, email, and the associated download details) for the duration of the sublicense term, which is twelve months from download, and for a reasonable period afterward as needed to demonstrate license compliance, resolve disputes, and meet legal or audit obligations. Server logs and security records are kept for a limited period, and analytics data is aggregated so that it does not identify you.

7. Security

We use reasonable technical and organizational safeguards to protect information, including encryption in transit (HTTPS), access controls on license records, short-lived signed download links, and abuse prevention on our forms. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email brand@visitsaltlake.com from the address you used on the Site; we may ask for additional information to verify your identity. We will respond within the time required by applicable law. We may need to keep a minimal record of a license acceptance in order to document a license we have already granted.

California residents

The California Consumer Privacy Act gives you the right to know what personal information we collect, use, and disclose; to request deletion or correction; to opt out of the sale or sharing of personal information; and not to be discriminated against for exercising your rights. We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that require a right to limit. Because we do not sell or share personal information, browser opt-out signals such as Global Privacy Control do not change how the Site operates.

The categories of personal information we collect are identifiers (name, email address, IP address), professional information (organization), and internet activity (assets requested and referring pages), for the purposes described in Section 3 and disclosed to the service providers listed in Section 5.

Other U.S. states

Residents of other states with comprehensive privacy laws, including Utah, may have similar rights, which you can exercise the same way. If we decline a request, you may appeal by replying to our response.

9. International visitors

The Site is operated from the United States, and information is stored and processed there by us and our service providers. If you access the Site from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country.

10. Children

The Site is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised version on this page with a new effective date. If the changes are material, we will take reasonable steps to notify the people whose information we hold.

12. Contact

Visit Salt Lake · brand@visitsaltlake.com