More privacy policy stuff (#59)

* More privacy policy stuff

* oops

views/privacy_policy.ejs

@@ -1,9 +1,19 @@
 <h1>Privacy Policy</h1>
-For the purposes of this policy the term "address" is defined as your street address (e.g., 1600 Grand Ave, Saint Paul, MN 55105) and/or your geographic coordinates (e.g., 44.938128, -93.169022). For the purposes of this policy "this gyro service" represents the domains ineedagyro.com and www.ineedagyro.com, their subdomains and any services (e.g. the Amazon Echo and/or Amazon Alexa applications) that access those domains and subdomains. For the purposes of this policy the term "we" is defined as the owners of this gyro service.
-
-This privacy policy discloses the privacy practices for this gyro service. This privacy policy applies solely to information collected by this gyro service.
+For the purposes of this policy the term "address" is defined as your street address (e.g., 1600 Grand Ave, Saint Paul, MN 55105) and/or your geographic coordinates (e.g., 44.938128, -93.169022). For the purposes of this policy "this gyro service" represents the domain ineedagyro.com its subdomains and any services (e.g. the Amazon Echo and/or Amazon Alexa applications) that access this domains and/or subdomains. For the purposes of this policy the term "we" is defined as the owners of this gyro service.
+<br/>
+This privacy policy discloses the privacy practices for this gyro service and applies solely to information collected by this gyro service.
 
 <h2>Information Collection, Use, and Sharing</h2>
 We are the sole owners of the information collected by this gyro service. We only have access to/collect information that you voluntarily give us via direct contact from you when you use this gyro service.
 
-We use your street address to find the gyros closest to you, but do not store your street address or geographic coordinates after we fulfill each request. We do store -- and may sell or rent -- the zip code associated with your request to anyone (hopefully this leads to more delicious gyros near you) but we do not store other information to associate you with your request.
+We collect and store, or reserve the right to collect and store, any information about your request. Your request includes (but is not limited to) the following information:
+<ul>
+  <li>address (as determined by your browser's location abilities at the time of the request)</li>
+  <li>browser type</li>
+  <li>browser version</li>
+  <li>request time</li>
+</ul>
+
+We use your street address to find the gyros closest to you, but do not store your street address or geographic coordinates after we fulfill each request. We do store -- and may sell or rent -- the zip code and any other data associated with your request to anyone. Hopefully this practice leads to more delicious gyros becoming available near you.
+
+It is our aim to make it difficult for someone to associate you our hour household with one or more requests, but it is not wholly impossible. For example, if you or your household have the only device with internet access in your zip code, a third party who purchases or rents zipcode information from this gyro service and knows that your household has the only device with internet access in your zip code could reasonably assume that the device in your household was used to make a request. If the device you use to make a request is the only one in your zip code to use the browser type/browser version combination, a third party who purchases or rents zip code, browser type and browser version information from this gyro service and knows that your household has the only device with in your zip code to use that browser type/browser version combination could reasonably assume that the device in your household was used to make a request.