Privacy Policy

Who we are, and what this covers

Colorado Water Rights (cowaterrights.com) is an independent reference site about Colorado water law, operated from Colorado, United States ("we", "us", "our"). It is not a law firm and provides no legal services — see the disclaimer and terms of use.

This Privacy Policy covers the website at cowaterrights.com and the single server function that handles the email form. It does not cover the third-party websites we link to — the Colorado Division of Water Resources, the Colorado General Assembly, the courts and the other sources we cite — which are governed by their own policies. The site is directed to a United States audience.

Summary of key points

• One field, freely given. The only personal information we receive is an email address you type into the guide form yourself. No name, no address, no phone number, no account.
• No cookies of ours, no analytics, no trackers. This site sets no cookies of its own, stores nothing in your browser, and runs no analytics, advertising or tracking scripts. The only JavaScript we include is the few lines that submit the email form; our host, Cloudflare, may additionally serve a small script that reveals email addresses to real visitors while hiding them from automated scrapers. Pages also carry inert JSON-LD structured-data blocks, which execute nothing.
• One minimal database, and only your address. Since 25 July 2026 your address is stored in a private subscriber list we operate, so the change alerts you asked for can actually reach you. It holds your address, the page you signed up from, and the dates you subscribed and unsubscribed — nothing else. The database also serves our other independent reference sites, with each site's list segmented and mailed separately; the details are below.
• Never sold or shared. We do not sell, rent, trade or otherwise disclose your address to anyone, and we have no advertising or referral partners.
• Leave whenever you like. Every email has an unsubscribe link. To have your address deleted outright, email us and we will remove it.

What we collect, and when

The email form

Pages on this site carry a form offering the owner's guide and change alerts. Through it we receive exactly one piece of personal information: the email address you enter. The form also contains a hidden field that is invisible to human visitors and exists solely to catch spam bots; it collects nothing from real people.

When you submit the form, our server stores your address in our own private subscriber list (a database hosted by Cloudflare) and sends two emails through our delivery provider, Resend: a confirmation to you, and a notification to our own inbox. The stored record is deliberately minimal: your address, the page you signed up from, and the dates you subscribed and unsubscribed. We build no profile and keep no record of what you read on this site.

Until 25 July 2026 this page said the form wrote to no database, and that was true — the "list" was our inbox. We changed it because a list you cannot reliably send to is not a list, and we had promised to tell you when the rules change. When you unsubscribe we mark the row rather than deleting it, which is what stops a stale copy of the list from quietly signing you back up later; ask us and we will delete it outright.

Two details of that infrastructure, stated plainly. First, the subscriber list lives in a single Cloudflare D1 database we operate that also holds the sign-up lists for our other independent reference sites. Each site's list is segmented by site and mailed only about its own subject: signing up here never puts you on another site's list, no site's list is combined with another's, and nothing is cross-mailed. Second, until this site's own sending address is configured with our delivery provider, the confirmation email may arrive from a sender address on another domain we operate, myroofrisk.com. It is still us sending it, about this site only, and it carries the same unsubscribe link and postal address as any other message from us.

Email you send us directly

If you email us — a correction, a question, a deletion request — we receive whatever you put in that message, and we keep it in our inbox so we can reply and, in the case of corrections, keep a record of why a page changed.

Information handled automatically by our host

This site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical information needed to deliver and protect the site, including your IP address, browser user agent and the pages requested, and it may set a strictly necessary security cookie at the network layer to distinguish visitors from bots. That happens at the platform level, not by our choice of any analytics product: we do not receive analytics, dashboards or visitor reports from it, and we do not use it to identify you. Cloudflare privacy policy

The Bing verification tag

Every page carries a Bing Webmaster Tools site-verification meta tag. It is a static token proving we control the domain. It sets no cookie, runs no script, and reports nothing about you. Search console tools tell us which search queries lead to the site in aggregate; they do not tell us who you are.

What we do not do

• No analytics. No Google Analytics, no Plausible, no Fathom, no server-side visitor tracking of our own.
• No advertising. No ad networks, no retargeting pixels, no affiliate tracking. The site carries no advertisements at all.
• No browser storage. We set no cookies, and we store nothing in localStorage or sessionStorage — not even a theme preference. Dark mode follows your operating system setting.
• No accounts, no logins, no profiles.
• No payments. Nothing on this site is for sale, so we never see payment details.
• No data brokers. We buy no personal data and we enrich nothing.

How we use what we receive

Your email address is used for two things only: to send you the owner's guide, and to send an occasional short email when Colorado water rules change. That is the entire purpose, and we will not repurpose it. If we ever want to use it for something else, we will ask first.

Who processes data on our behalf

Provider	What they do	What they see
Cloudflare	Hosting and network security	Technical request data as described above policy
Resend	Sends the confirmation and notification emails	Your email address and the message content policy

Both act as service providers on our behalf. Beyond them, we disclose personal information only if we are legally required to — a valid subpoena, court order or other lawful demand — and we would rather tell you first where we are permitted to.

Do we sell or share personal data?

No. We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not run advertising. If that ever changed, we would say so on this page before it happened and give you a way to opt out.

How long we keep it

We keep your address until you ask us to delete it or unsubscribe. Sign-up and correction emails stay in our inbox, and Resend retains delivery logs under its own retention schedule. When you ask for deletion, we remove your address from our list and delete the notification email.

Your choices and rights

• Unsubscribe using the link in any email. It works immediately.
• Ask what we hold about you, and we will tell you — which, realistically, will be one email address and any messages you have sent us.
• Ask us to correct or delete it, and we will.

Email [email protected] for any of these. We honor these requests for everyone who asks, whatever state or country you live in, and we will not charge you or make you create an account to exercise them.

Marketing email, and the postal address on it

United States law governing commercial email requires that every message include a working unsubscribe mechanism and a valid physical postal address for the sender. Both are in the mail we send. Every confirmation and every alert carries a one-click unsubscribe link, and carries our postal address:

Colorado Water Rights, PO Box 203, Larkspur, CO 80118

Write to us at that address if you prefer paper. Email is faster: [email protected].

Until 18 August 2026 this section said we did not publish a postal address and would add one before sending marketing email at any scale. The address was already in the footer of every confirmation email, so the page understated the practice rather than the reverse. It says the address now.

Children

This site is intended for adults dealing with property, wells and water rights. It is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has sent us an address, email us and we will delete it.

Security

The site is served over HTTPS, and the only personal data we hold sits in mail systems operated by established providers. No system is perfectly secure, and we cannot guarantee that transmission over the internet is free of risk. The best protection here is structural: we collect almost nothing, so there is almost nothing to lose.

A note about the public records this site teaches you to use

Colorado water and well permit records are public, and some of them contain individuals' names and postal addresses. We do not collect, copy, host or republish those records, and we do not reproduce anyone's personal details on this site. Where we explain how to search them — the well permit tutorial, for instance — the purpose is a property you are actually dealing with, not looking people up.

Changes to this policy

If we change what we collect or what we do with it, we will update this page and change the effective date at the top, in the same release as the change itself. Material changes affecting people already on the list will be sent by email.

What changed on 18 August 2026: the postal address that was already in every email footer is now published here too, the shared subscriber database and the temporary sender domain are described in the email form section above, and the terms of use gained dispute-resolution provisions (arbitration with a 30-day opt-out, a class-action waiver, and indemnification). What we collect did not change. The earlier change, on 25 July 2026, is described above: the form began writing to the subscriber list.

Contact

Email [email protected] with any privacy question, or to have your address removed. By post: Colorado Water Rights, PO Box 203, Larkspur, CO 80118. See also our terms of use, the disclaimer, and about this site.