EAV Toolbox

EAV Toolbox is run by neighbors for the East Atlanta Village tool library. Here’s what the app keeps about you, who can see it, and for how long.

What the app keeps

• Your name, email address, phone number and street address (if you give them), and whether you’d like email or app alerts.
• If you turn on app alerts, the alert address your phone or browser gives the app for each device, and a short device name like “iPhone”.
• Your borrowing: requests, pickups, due dates, extensions, returns, waitlist places, and whether a return was late.
• Condition notes and photos taken when a tool goes out and comes back, and any problem you report.
• Your signatures on the borrower rules and the liability waiver: which version, the name you typed, each box you ticked and its wording, when, the name, email and phone on your account at the time, the IP address and browser you signed from, and the check of the one-time code emailed to you (the code itself isn’t kept). Agreements from before signing was added (the name you typed and when) are kept too.
• Wishlist suggestions, “me too” votes and any note with them, and donation offers with any photo.
• A log of the messages the app sends you: which message, to which address, and when.
• A record of what admins and helpers do, such as approving a request or pausing someone’s borrowing.
• Each check on the public verify page: what was entered, the result, and the IP address and browser it came from.

Who sees it

• The library’s admins can see all of it.
• Your street address is seen only by admins and, while you’re waiting to join, by the people who approve new members.
• Helpers see what they need for the jobs an admin gives them, such as the name and contact details of someone picking up or returning a tool.
• Other neighbors never see your name, contact details or borrowing. They see only how many people are waiting for a tool and how many asked for a wishlist item.
• Anyone with the reference code or the PDF of an agreement you signed can check it on the verify page. It shows the document, version and date, and your initials only: never your name, contact details or where you signed from.
• Catalog tool pictures can be seen by anyone with the link. Condition, problem and donation photos are private: only you, admins and helpers can open them, through links that stop working after an hour. The app removes a photo’s hidden details (such as where it was taken) before storing it. Please leave people and personal details out of photos.

Services the app uses

The app runs on Supabase (the database, sign-in and photo storage), Vercel (the website) and Resend (email). App alerts go through the alert service built into your phone or browser (Apple’s, Google’s or Mozilla’s), which sees only that an alert is on its way, not what it says. If texting is ever turned on, texts go through Twilio. When an admin, or someone who approves new members, views your street address, the app shows it on a Google map (Google receives the address to draw it) and asks the U.S. Census Bureau’s address lookup where it is, to show the distance from the library. These services handle your information only to run the app. The library doesn’t sell information, show ads, or use tracking or advertising cookies. Its only cookies keep you signed in and, while you sign in, remember the page you were opening.

How long it’s kept

Your information is kept while you’re a member. If you leave (Account → Leave the library) or an admin removes you, your name, email address, phone number and street address are erased from your member record and from the message log, your app-alert devices are forgotten, messages waiting to be sent to you are cancelled, open donation offers are withdrawn, wishlist notes are cleared, and your sign-in is closed. Your past loans and votes stay in the library’s records without your name, so the library can keep track of its tools.

Agreements you sign (the borrower rules and the liability waiver) are legal records, so they’re kept permanently, including after your account is closed: the name you typed, the name, email address and phone number on your account when you signed, and the record of when and how you signed. Once your account is closed, only admins can see them.

Questions

Ask an admin to see, correct or delete what the app holds about you, or with any questions about this notice.