Privacy
How Minnippi Residents Community looks after the details you give us. Last updated 13 September 2026.
The short version
- We collect only what the site needs to work, and use it only for the community.
- We never sell your details, never use them for advertising, and never give them to anyone else — including council, the developer or sponsors.
- Other residents see your first name and street, or the display name you choose on the community feed. Never your surname, house number, email or phone, unless you choose to show a phone number on a noticeboard post.
- There are no ads, no analytics and no tracking on this site.
- You can ask us to erase your details at any time.
Who we are
The Minnippi Residents Community is a free group run by resident volunteers of the Minnippi estate in Cannon Hill. We are not a company. The committee runs this website.
For anything about your details, use the contact form. It goes to every committee member who runs the site.
What we collect, and why
When you register
Your first and last name, email, phone number and street address, and a password. The address is how the committee checks that you live on the estate. Your email and phone are how we reach you about your account, issues you raise and events. Your password is stored only in scrambled form — nobody, including the committee, can read it.
What you add to the site
Issues you lodge, suggestions and your support for them, noticeboard posts and their photos, event RSVPs (how many adults and children), and, if you join the community feed, your display name, an optional photo and short bio, and your posts, comments, likes, reports and private messages.
Before any photo is stored — on the noticeboard, the community feed or your profile — the site rebuilds the image. That removes the hidden information a phone camera adds, including the GPS location where the photo was taken. If that step isn't available, the site refuses the photo rather than keep it. Noticeboard photos added before 14 September 2026 have been rebuilt the same way.
The contact form
Your name, email and message. They are stored on the site and emailed to the committee.
Partner organisations
For a partner account (our local councillor's office, Minnippi Golf, council and similar): the organisation, a contact name, email and phone, the reason access is needed, and a password stored the same scrambled way.
Technical records
- The internet address a password reset was requested from, and the address a committee member was using when they took an admin action. These help us spot misuse.
- If you tick Keep me signed in, a short description of the device (for example "Chrome on Android"), so you can see and forget your devices in Settings.
- A record of each email the site sends: who it went to, the subject, and whether it was delivered.
Who can see what
Other residents
- Issues, suggestions and noticeboard posts show your first name and street name — not your house number. Issues and suggestions can be lodged anonymously, and then residents see neither.
- Noticeboard posts show your phone number only if you choose phone as the way to contact you.
- The community feed shows your display name, photo, bio, the month you joined, and what you post.
- Event RSVPs are shown to residents only as totals.
- Private messages are seen only by you and the resident you're writing to.
The committee
- Committee members see what they need for their role. A member without the Site Admin permission sees residents by first name and initial only.
- Site Admins — a small number of committee members, chosen by the committee — can see full names, addresses, emails and phone numbers, including who lodged an anonymous issue or suggestion. That is so an abusive report can be traced, and so someone can call you about your own issue.
- When you lodge an issue that isn't anonymous, the committee member looking after that area may be emailed your name, email and phone so they can follow it up.
- Private messages: no page on the site lets the committee read them. If you or the other person reports a conversation, the committee sees the recent messages attached to that report, and nothing else. Messages are stored on our server like everything else, so they are private but not encrypted end to end.
- Emails to the committee — contact messages, new registrations, reports — land in committee members' own email inboxes, so those email providers hold a copy too.
Partner organisations
An approved partner sees the issues in the areas it is responsible for: the title, the description and location you wrote, and the progress updates. Never who lodged it or how to contact them — the committee is always the go-between. What you type in an issue is what they read, so leave your house number out unless it's needed.
Where it is kept
The site, its database and uploaded photos are hosted by Hostinger. The server that stores them is in Indonesia, and pages reach you through Hostinger's delivery network, from a node in Sydney. Everything between your device and the site is encrypted (https). Emails are sent through Hostinger's mail service. Hostinger keeps daily backups of the site.
Cookies, and the app
The site sets only these cookies. None of them tracks you, and nothing from another company is loaded.
| Cookie | What it's for | How long |
|---|---|---|
| PHPSESSID | Keeps you logged in while you use the site | Until the browser closes |
| mr_device | Keeps you signed in on a device where you asked for that | Up to 400 days, restarting each time you visit |
| mr_keep | Remembers whether you ticked Keep me signed in last time | 1 year |
| mr_app | Notes that the site was opened from the home-screen app | 1 year |
| mr_push | Remembers which notification address belongs to this device, so logging out can turn its notifications off | 400 days, or until notifications are turned off |
The home-screen app saves only the stylesheet and a "you're offline" page on your phone. It never saves a page with your details on it.
How long we keep things
- Your account: until you ask us to erase it, or the committee closes it.
- Noticeboard posts: off the board after 60 days.
- Records of emails sent: 90 days. The text of an email is cleared as soon as it has been sent.
- Password reset links: they stop working after 60 minutes, or once used.
- Kept sign-ins: forgotten after 400 days without a visit, or straight away when you log out on that device.
- Issues, suggestions, posts and comments: they stay as the community's record. You can delete your own feed posts and comments at any time.
Your choices
- Newsletters: every newsletter email has an unsubscribe link.
- Email notifications for messages and comments: turn them on or off in Settings.
- Signed-in devices: see and forget them in Settings.
- Lodge anonymously: tick the box when you lodge an issue or a suggestion.
- Blocking: block a resident from their profile or your conversation with them. You stop seeing each other on the feed, and neither of you can message the other.
- Correct your details: ask the committee through the contact form.
Asking us to erase your details
Send a message through the contact form from the email address you registered with, so we know the request is really yours. A Site Admin will erase your details, normally within 7 days, and email you once it's done.
What erasing does
- Your name, email, phone, address and password are deleted from your record, every device is signed out, and notifications are turned off on all of them.
- Your display name, photo and bio are removed.
- Your name and email are taken out of the site's records of emails sent and the committee's activity log.
- What you contributed — issues, suggestions, posts, comments — stays, credited to "Former resident". If you want some of it removed as well, say so in your message.
Copies inside Hostinger's backups, and emails already delivered to committee inboxes, are not changed by this. The backups are replaced as new ones are made.
Notifications
You can turn on notifications for a device in Settings. When you do, the site stores that device's notification address and the two keys used to encrypt what is sent to it, with a short description of the device (for example "Android · Chrome · app"). The address is issued by the company behind your browser — Google, Apple, Mozilla or Microsoft — and each notification passes through their service, encrypted so that they cannot read it.
- A notification never contains a message, a name, a title you wrote or anything reported — only that something is waiting for you. Tapping it opens the page.
- You can switch each kind of notification off in Settings, or turn notifications off for a device.
- Logging out on a device turns its notifications off. Erasing your details turns them off on every device, and a device the notification service says no longer exists is deleted.
- A record of each notification sent — who it went to, what kind and when — is kept for 7 days.
Changes, and questions
If this policy changes, the date at the top changes too, and anything significant is announced to residents first.
We are a small volunteer group and we aim to follow the Australian Privacy Principles. If you have a concern, please contact the committee first. If we can't resolve it, the Office of the Australian Information Commissioner can help: oaic.gov.au.