How We Handle Your Personal Information
This policy sets out what data we collect when you visit county-cad.us/, why, who we share it with, how long we keep it, and the rights you have under California, Virginia, Texas, Florida, Colorado, Connecticut, and other state privacy laws. Read it alongside our Cookie Policy and Disclaimer.
What’s on this page
1. Who We Are
county-cad.us/ is an independent informational and educational directory of U.S. county-level property assessment offices — county appraisal districts, county assessors, and county property appraisers. It is operated as a privately-owned editorial publication. We are not affiliated with any state Department of Revenue, the Texas Comptroller of Public Accounts, the California State Board of Equalization, the Florida Department of Revenue, the International Association of Assessing Officers (IAAO), the National Association of Counties (NACo), the IRS, or any county appraisal district, county assessor, or county property appraiser.
For all privacy and data inquiries, contact: info@county-cad.us
2. Property Records Are Public — We Do Not Process Them
County property records — owner names, addresses, parcel descriptions, assessed values, exemption status, tax history — are public records under state public-records law in every U.S. state. They are maintained by county appraisal districts, county assessors, and county property appraisers, and are accessible through each county’s own search portal. county-cad.us/ does not request, host, sell, scrape, or aggregate these records. We describe how to access them through the county’s official portal and we link to the county’s portal directly. If you want to view, request, or correct your property record, contact the county office — every county page on this site lists the verified contact and links to the county’s own search interface.
If you contact us about a privacy concern related to your property record (for example, a mailing-address suppression program for a domestic-violence survivor or law-enforcement officer), we will route you to the right county or state authority — most states maintain confidentiality programs for qualifying individuals.
3. FCRA Non-CRA Position
The Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) regulates "consumer reports" used for "permissible purposes" — primarily employment, credit, insurance, and tenant screening. county-cad.us/ does not assemble, evaluate, or sell consumer reports. We do not provide "background checks," tenant-screening reports, or property-ownership reports for any FCRA-permissible purpose. Information published on our site is general informational content drawn from public-record sources and authoritative public agency pages — it is not a "consumer report" in the FCRA sense.
4. HIPAA — Not a Covered Entity
The HIPAA Privacy Rule (45 C.F.R. Parts 160 and 164) and Security Rule apply to "covered entities" — health plans, healthcare clearinghouses, and most healthcare providers — and to their "business associates." county-cad.us/ is none of these. We do not collect, store, transmit, or maintain Protected Health Information (PHI). Disability and disabled-veteran exemptions filed with county assessors involve health-related documentation; that information is held by the county office, not by us.
5. What Information We Collect
We collect only what’s necessary to operate the site:
| Category | Examples | How collected |
|---|---|---|
| Server logs | IP address (truncated), user-agent, request path, response code, timestamp | Automatic, every request |
| Analytics | Page views, time on page, click paths, referrer (aggregated) | Google Analytics 4 if you consent |
| Cookie preferences | Your accept/reject choice for analytics and advertising | Cookie banner |
| Functional preferences | Selected county, font size, accessibility preferences | Local browser storage |
| Email content | Anything you send to info@county-cad.us | Direct email from you |
| Advertising data | Frequency capping, ad measurement | Google AdSense if you consent |
We do not collect: your name, address, parcel number, account number, Social Security Number, or any property-tax-related personal information unless you choose to email it. We do not require account creation. We do not run client-side fingerprinting beyond what is necessary for security and bot mitigation through Cloudflare.
6. Why We Collect It
- To operate the site — load pages, prevent fraud, mitigate bots and abuse
- To remember your choices — cookie consent, accessibility preferences, selected county
- To understand what’s useful — aggregate analytics on which county pages, exemption guides, and protest walkthroughs are read most
- To support display advertising — frequency capping and basic measurement, with personalised advertising only where you have consented
- To respond to your messages — when you email us
7. Legal Bases & State-Law Framework
The legal foundation for processing depends on your jurisdiction. For visitors in states with comprehensive privacy laws (CCPA/CPRA in California, VCDPA in Virginia, CPA in Colorado, CTDPA in Connecticut, UCPA in Utah, TDPSA in Texas, FDBR in Florida, OCPA in Oregon, and others), processing is based on (a) the necessity of providing the requested service, (b) our legitimate interest in operating the site safely and improving it, and (c) your consent for analytics and advertising cookies.
9. How Long We Keep Information
| Data type | Retention |
|---|---|
| Server logs (security) | 30 days, then aggregated |
| Analytics data | 14 months (default GA4 retention) |
| Cookie consent record | 12 months from when set |
| Email correspondence | 3 years from last contact, then deleted |
| Functional preferences | Until you clear browser data |
10. Your Rights Under U.S. State Privacy Laws
Comprehensive privacy laws across U.S. states give residents specific rights. The exact rights depend on your state of residence — the table below summarises the main rights under the most-cited state laws.
| State / Law | Citation | Key rights |
|---|---|---|
| California (CCPA / CPRA) | Cal. Civ. Code § 1798.100 et seq. | Know, delete, correct, opt-out of sale/sharing, limit use of sensitive information, non-discrimination |
| Virginia (VCDPA) | Va. Code § 59.1-575 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Colorado (CPA) | C.R.S. § 6-1-1301 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Connecticut (CTDPA) | Conn. Gen. Stat. § 42-515 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Utah (UCPA) | Utah Code § 13-61 | Access, delete, portability, opt-out of targeted advertising / sale |
| Texas (TDPSA) | Tex. Bus. & Com. Code Ch. 541 | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Florida (FDBR) | Fla. Stat. § 501.701 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale |
| Oregon (OCPA) | ORS Ch. 646A | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Other states | Various | Iowa, Tennessee, Indiana, Montana, New Jersey, Delaware, New Hampshire, Kentucky, Maryland, Minnesota, Nebraska, Rhode Island and others have or are implementing comparable laws |
To exercise any right, email info@county-cad.us with subject line “Privacy rights request” and your state of residence. We respond within 45 days (extendable to 90 days where allowed for complex requests). We may need to verify your identity to protect against fraudulent requests.
11. Children
county-cad.us/ is not directed to children under 13. The federal Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506) imposes specific obligations on operators that knowingly collect personal information from children under 13. We do not knowingly collect personal information from children under 13. Property tax topics are inherently adult-oriented and our content is not directed at children.
12. Security
We use industry-standard technical and organisational measures to protect information:
- HTTPS/TLS encryption for all site traffic
- Cloudflare for DDoS and bot mitigation
- Access controls — only authorised editorial staff can access logs and email
- Periodic security review of hosting and email infrastructure
- No on-site collection of payment card information, Social Security Numbers, parcel/account numbers, or property records
No internet transmission or storage system is perfectly secure. If we discover a breach affecting personal information, we will notify affected users in accordance with applicable state breach-notification laws.
13. International Visitors
Our site is operated from and intended for visitors in the United States. If you visit from outside the U.S., your information will be transferred to and processed in the U.S. We do not market to or knowingly collect data from EU/EEA, UK, or other non-U.S. visitors as a primary audience, but we do honour Global Privacy Control (GPC) signals and reasonable rights requests from visitors regardless of location.
14. Changes to This Policy
We update this policy when our practices change or when applicable laws change. Substantive changes are flagged at the top of the page with a new “Last reviewed” date and, for material changes, a notice on the site for 30 days.
15. Contact
For any privacy or data-rights question, email info@county-cad.us with subject line “Privacy” or “Privacy rights request” — see Contact Us for the full list of channels.
Have a Privacy Question or Rights Request?
Email us with subject line “Privacy rights request.” We respond within 45 days as required by California, Virginia, Colorado, Connecticut, Texas, Florida, Oregon, and other state privacy laws.
📧 info@county-cad.us