The short version: When you sign up for a newsletter, use a form, or make a submission, we collect your name and email so we can reply and send what you asked for. We use Google Analytics 4 and PostHog to understand how the site is used, and a Meta (Facebook) Pixel to measure and run advertising. We do not sell your information for money, but under California law the Meta Pixel may count as a "sale" or "share" for advertising — you can opt out below. You control analytics and advertising cookies through the "Your Privacy Choices" link in our footer, and we honor Global Privacy Control automatically. Questions: hello@getiowa.com.

Introduction

Get Iowa, operated by Spangle LLC ("we," "us," or "our"), operates the website getiowa.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, subscribe to our newsletters, or interact with our services. By using the site, you agree to the practices described here.

Information We Collect

Information you give us. When you subscribe to a newsletter, fill out a form (contact, partner inquiry, event promotion, Iowan Home Connect, or a content submission), or apply to write for us, you provide information such as your name, email address, phone number, the city you're interested in, and anything you include in a message or submission.

Information collected automatically. Like most websites, ours records basic technical and usage data when you visit: pages viewed, time on page, the link that referred you, your approximate location (country/region), UTM campaign parameters, and general device and browser details. This comes through the analytics and hosting providers listed below, and where it is collected through non-essential cookies it is subject to your consent choice (see "Cookies and Tracking").

How We Use Your Information

  • Deliver newsletters and email communications you have opted into
  • Respond to inquiries, submissions, and partnership or writer requests
  • Operate, secure, and improve the website and understand how it's used
  • Measure and run advertising for Get Iowa
  • Manage partnerships, sponsorships, and promoted content
  • Comply with legal obligations

The Services We Use to Run the Site

We rely on a small set of third parties ("processors") that handle data on our behalf. Each one handles data only to provide its service to us, under its own terms and privacy commitments:

  • Google Analytics 4 (Google LLC) — measures website traffic and usage. Sets analytics cookies, subject to your consent choice and Google Consent Mode.
  • PostHog (PostHog, Inc.) — product and event analytics. It records how visitors use the site (pages and features viewed, clicks, and conversion events such as newsletter sign-ups and form submissions) so we can understand engagement and improve the experience. We use PostHog only for event and product analytics. We do not use PostHog for advertising.
  • Meta Pixel (Meta Platforms, Inc.) — advertising and measurement. We use the Meta Pixel to measure ad performance and to build and reach audiences on Facebook and Instagram. When the pixel is active, certain event and identifier data is shared with Meta for these purposes. See "Cookies and Tracking" for how the pixel is gated, and "Your Rights" and "Your Privacy Choices" for how to opt out.
  • Beehiiv (Beehiiv, Inc.) — delivers and manages our newsletters. Your name and email are stored with Beehiiv to send the newsletters you subscribe to.
  • Make.com (Celonis SE) — receives certain form submissions and routes them to our team and connected tools.
  • Resend (Resend, Inc.) — delivers transactional emails (such as form confirmations and writer-application replies) to our inbox and to you.
  • Vercel (Vercel, Inc.) — hosts and serves the website and keeps standard server and security logs.
  • Supabase / Tuscan CMS (Supabase, Inc.) — hosts the database and content management system behind the site's pages.
  • Meta Graph API (Meta Platforms, Inc.) — used only to display Get Iowa's own Instagram feed on the site. It pulls our public Instagram posts to show them here; it does not collect information about you as a visitor.

We may also disclose information if the law requires it, to protect our rights or safety, or as part of a merger, acquisition, or sale of the business.

Cookies and Tracking

We use cookies, pixels, and similar technologies to keep the site working and to understand how it's used. These include:

  • Essential and consent cookies. First-party cookies that keep the site working and run the consent banner described below. tuscan_consent (functional, about one year) remembers your cookie choice so we don't ask again, and tuscan_geo (functional, about six hours) stores a rough region (EU versus rest of world) so the banner shows the right options. Neither tracks you across other sites.
  • Analytics cookies. Google Analytics 4 cookies (for example _ga and _ga_*) and PostHog cookies (for example ph_*) help us understand site usage and engagement. These are non-essential and run subject to your consent choice.
  • Advertising cookies and pixel. The Meta Pixel is used for audience building, retargeting, and conversion measurement, and shares event data with Meta. This is the only cross-site advertising technology on the site, and it is gated behind your consent choice as described below.

How we ask for consent

The site uses a geo-aware cookie-consent banner together with Google Consent Mode v2 to decide what runs:

  • EU, EEA, UK, and Switzerland: non-essential analytics and the Meta Pixel stay off until you choose "Accept." Nothing non-essential runs before that opt-in.
  • United States and the rest of the world: we show a short notice. Analytics runs by default and you can decline at any time. The Meta Pixel is treated as opt-out — it loads by default in this region but stops as soon as you decline or use the controls below.
  • Global Privacy Control (GPC): if your browser or extension sends a GPC signal, we honor it automatically as an opt-out — analytics is not set and the Meta Pixel does not load. You don't have to do anything else.

Even when analytics is declined, Google Consent Mode still lets us see anonymous, modeled traffic totals rather than your individual activity. The Meta Pixel specifically is held off whenever you are in the EU/EEA/UK/Switzerland and have not yet accepted, whenever a GPC signal is present, and whenever you have declined or opted out.

How Long We Keep It

We keep newsletter sign-ups for as long as you stay subscribed, and form submissions as long as we need them to handle your request and for a reasonable period after, then delete or archive them. Analytics data follows each provider's retention settings. You can ask us to delete your information at any time (see "Your Rights").

Data Security

The site runs over HTTPS, and we use reputable providers with their own security programs. We apply reasonable safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. That said, no method of transmission or storage is ever 100% secure, so we cannot guarantee absolute security.

Where Your Data Is Processed

We're based in the United States and our providers process data primarily in the US. If you contact us from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those where you live.

Your Rights

Depending on where you live, you have rights over your personal information. We honor these for everyone who asks, regardless of location.

If you're in California (CCPA/CPRA), you can:

  • Know what personal information we collect and how we use it
  • Access a copy of your personal information
  • Delete your personal information
  • Correct inaccurate personal information
  • Opt out of the "sale" or "sharing" of personal information. We do not sell your information for money, but our use of the Meta Pixel for advertising may qualify as a "sale" or "share" for cross-context behavioral advertising under California law. You can opt out using the "Your Privacy Choices" link in our footer, by sending a Global Privacy Control signal, or by disabling advertising cookies in your browser.
  • Not be discriminated against for exercising these rights

If you're in the EU, UK, or a similar jurisdiction (GDPR-style), you can:

  • Access, correct, or delete your personal data
  • Restrict or object to how we process it
  • Request data portability (get your data in a usable format)
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with your local data protection authority

To exercise any of these, email hello@getiowa.com or use our contact page. We may need to verify your request before acting on it, and we'll respond within the time the law allows.

Your Privacy Choices

Here's how to control what happens on this site:

  • Your Privacy Choices. Use the "Your Privacy Choices" link in the footer to reopen the consent banner and accept or decline analytics and advertising cookies at any time. This is also where you opt out of the Meta Pixel "sale"/"share" described above.
  • Global Privacy Control (GPC). If your browser or extension sends a GPC signal, we treat it as a valid opt-out of analytics and advertising cookies automatically — you don't have to do anything else.
  • Browser controls. You can block or delete cookies in your browser settings, and install the Google Analytics opt-out add-on to opt out of Analytics across all sites.
  • Newsletter. Every newsletter includes an unsubscribe link, and you can opt out of marketing email at any time.
  • Email us. Send any access, deletion, or correction request to hello@getiowa.com.

Do Not Sell or Share My Personal Information. We do not sell your personal information for money. To the extent the Meta Pixel constitutes a "sale" or "share" for advertising under California and similar state laws, you can opt out using the "Your Privacy Choices" footer control, by sending a Global Privacy Control signal, or by disabling advertising cookies in your browser.

Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will take steps to delete that information.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. If a change is significant, we'll make a reasonable effort to flag it.

Contact Us

Questions or concerns about this Privacy Policy or your data? Email hello@getiowa.com or reach out through our contact page.