Who we are

SLICs is an independent web app built and run by Tiago Davila, a UPS Feeder driver, so that drivers can look up destination addresses, phone numbers and directions without a paper binder. It is not made, endorsed or operated by UPS.

This policy explains what information the app collects, why, who can see it, and the choices you have. It applies to everything under this site. If you have a question that isn't answered here, email WebDevilishSmile@gmail.com.

Information you give us

• Account details. If you sign in with Google, we receive your name, email address and profile picture from Google. If you create an account with an email and password, we store your first name, last name and email address. Your password is stored only as a one-way hash, so it cannot be read back by us or anyone else. If you reset your password from an emailed link, we note that your email address is confirmed.
• Profile details. You can optionally add a phone number and change your display name on your profile page.
• Comments and places. Anything you post on a SLIC is stored with your account and the SLIC it belongs to. Places you add on Whip It In & Out, including any parking pin you give them, and your comments and replies there are stored with your account too. So are any votes you cast on other drivers' comments.
• Reports about a SLIC. If you use "Something wrong with this SLIC?", what you pick and any note you write are stored with your account and the SLIC, so the administrator can check and fix it. Other drivers never see reports.
• Driver verification. If you ask to be verified for covers, your name, the employee ID in your UPS email and your seniority date are stored with your account until the administrator decides your request. Nothing is sent to your UPS email. Once you're verified, your account is linked to your name as the on-call sheet writes it.
• Messages you send us. If you email us, we keep the email so we can reply.

Information collected automatically

• Lookup history. Each time you look up a SLIC while signed in, we record which SLIC you viewed and when. This powers the lookup counter on the home page and the History page for supporters. Notes you add to entries on the History page are stored with that entry, and only you can see them.
• IP address. When you create an account, your IP address is used to limit how many sign-ups can come from one network in an hour. Those records delete themselves automatically once the hour is up. Our hosting provider also keeps standard server logs, which include IP addresses.
• Usage and performance data. We use Vercel Analytics and Speed Insights to see which pages are used and how fast they load. These tools are cookie-free and report aggregated numbers; they don't identify you by name and don't track you across other websites.
• Your location, only when you ask. "Near me" and "Use my current location" ask your browser for your location only when you tap them. Near me uses it inside your browser to sort places by distance; it is never sent to or stored by the app. "Use my current location" fills in a place's parking pin, which is saved with that place only if you save the place.

Cookies and local storage

The app uses a small number of cookies, all of which are needed for it to work. A session cookie keeps you signed in for up to 30 days, and a couple of short-lived security cookies protect the sign-in process. Your light or dark theme choice, whether you've dismissed the "add to home screen" reminder, and the last SLIC you looked up (so the app can remind you to leave a comment about it) are saved in your browser's local storage. We don't use advertising cookies or any third-party tracking cookies.

How we use your information

• To run the app: signing you in, showing SLIC details, saving your comments and profile, and building your lookup history.
• To show who wrote a comment, so drivers know where a tip came from.
• To unlock supporter features, such as the History page, when you support the app on Buy Me a Coffee.
• To prevent abuse, such as scripted sign-ups or comment spam.
• To understand how the app is used and make it better.
• To answer your questions when you contact us.

We never sell your information, and the app shows no ads.

Who can see your information

• Other drivers. Any signed-in user can see your display name, profile picture, comments, the places you add and votes, and a check mark next to your name if you're a verified driver. Your email, phone number, lookup history and verification details are never shown to other drivers.
• The administrator. As the person running the app, Tiago Davila can see account details (including your email and phone number if you added one), comments, reports about SLICs, lookup history and driver verification requests in order to keep the app working, moderate comments and verify drivers, and the support you send through Buy Me a Coffee.
• Service providers. The app runs on Vercel (hosting, analytics and file storage for directions PDFs) and stores its data in MongoDB Atlas. Google handles Google sign-in. Resend sends our emails, which today are only password reset emails: it receives your email address and the message when you ask for one. Buy Me a Coffee processes supporter payments. For each one it tells us your email address and name, the amount, any message you leave and when a membership starts or ends. We never receive your payment details.
• When the law requires it. We may disclose information if we are legally required to.

Tapping an address or phone number hands it to your maps or phone app. What happens from there is covered by that app's own privacy policy.

The driver roster

For the cover and bid features, the administrator keeps a list of drivers in the building with each driver's name, employee ID, seniority date and phone number. This list can include drivers who have never created an account. It is matched against the names and seniority on the drivers' on-call sheet to keep it current. Only the administrator sees it, to help check verification requests. If you are on the roster and want your entry corrected or removed, email us.

Covers

The Covers page is for verified drivers. It shows which cover jobs are still open and which are taken, never who took them, and your own place and call-in time on the week's list. It never shows you another driver's picks or why they are off.

How long we keep information

• Account and profile details are kept for as long as your account exists.
• Comments are kept until you delete them, or until your account is deleted. Delete SLIC comments from your profile page and comments on a place from the place itself.
• Places you add stay after your account is deleted, without your name, because other drivers rely on them.
• Reports about a SLIC are kept after they are dealt with, as a record of what was fixed. If you delete your account they stay, no longer linked to you.
• Lookup history is kept while your account exists, and the History page shows all of it. Removing an entry hides it from that page; it is still counted in your lookup total, and it is deleted with your account.
• A driver verification request keeps your employee ID and seniority date only until the administrator decides it; then they are deleted. The request is deleted with your account. Your verification lasts until your account is deleted or the administrator removes it.
• A record of each support or membership change you make through Buy Me a Coffee is kept as the app's record of support. If you delete your account it stays, no longer linked to you; ask us to remove it.
• Rate-limit records for signing up, signing in and password resets, which can hold the email address you typed, expire automatically within about an hour.
• A password reset link is kept only as a one-way hash, and only until it is used or expires: 30 minutes for a link sent by email, 24 hours for one from the administrator.
• Session cookies expire after 30 days, or as soon as you sign out.

Your choices

• Edit your display name and phone number, or delete any of your SLIC comments, from your profile page.
• Edit or delete your comments on places, and the places you added, on Whip It In & Out.
• Sign out from any device to end that session.
• If you signed in with Google, you can also remove SLICs from the apps connected to your Google account.
• Email WebDevilishSmile@gmail.com to ask for a copy of the information we hold about you, or to have your account and everything tied to it deleted, including your comments and lookup history.

Security

The site is served over HTTPS, passwords are stored as one-way hashes, and administrator-only actions are checked on the server on every request. No system is perfectly secure, so please use a password you don't use anywhere else and let us know right away if you think your account has been accessed by someone else.

Children

SLICs is a tool for working drivers and is not intended for anyone under 18. We don't knowingly collect information from children; if you believe a child has created an account, email us and we will remove it.

Changes to this policy

If the app starts collecting or sharing information in a new way, this page will be updated and the effective date at the top will change. Continuing to use the app after a change means you accept the updated policy.

Contact

Questions, corrections and deletion requests all go to WebDevilishSmile@gmail.com.