Back40 Forum

Effective October 28, 2026 · Version 2026-10-28

Oettinger Management Group operates Back40 Forum at back40forum.com. This policy explains the personal information handled in running our adult preparedness, homesteading, and practical-skills community. It applies to Back40, not automatically to other businesses operated by the same group or to websites you visit through links.

1. Information we collect

• Account information: your username, email address, password hash, registration time, account status, preferences, and records of accepting our Terms and confirming that you are at least 18. We do not need your full birth date to establish the minimum age. Do not send us your password; passwords are stored using the forum’s password-hashing mechanism, not as readable account passwords.
• Content and optional profile information: posts, replies, signatures, uploaded files, avatars, private messages, reports, and any profile details you choose to provide, such as location, birthday, website, or social links. Optional information can expose more about you than your screen name does.
• Technical and security information: IP addresses, request and session information, browser or device information, access times, pages requested, referrers when supplied, login attempts, moderation and security events, and cookies used to operate or protect the site. Hosts and network providers may also produce technical logs.
• Communications: information you provide when requesting help, reporting content, appealing moderation, or making a privacy or legal request. Relevant correspondence and actions may be retained to address the request and document the outcome.

Information comes from you, your use of the forum, people communicating with or reporting you, and service providers helping us operate and secure the site. We do not require payment-card information, government identifiers, medical records, precise location, or an inventory of your supplies. Avoid posting these details or personal information about children or other people.

2. How we use information

We use information to create and manage accounts; authenticate access; display and organize discussions; provide requested features and support; remember preferences; investigate spam, abuse, security incidents, and legal complaints; moderate the community; maintain and troubleshoot the service; keep operational backups; comply with legal obligations; and establish, exercise, or defend legal claims. We use acceptance records to document the policy version and age confirmation associated with registration.

Forum participation does not automatically subscribe you to unrelated marketing from Oettinger Management Group or its other businesses. If we offer newsletters or marketing subscriptions, we will explain the choice separately and provide an unsubscribe route. Service or legal communications are different from marketing. Notification and account-email features depend on the functionality available at the time; do not rely on the forum to deliver emergency alerts.

3. Public posts, profiles, uploads, and private messages

Public forum content is public. Posts, public profile fields, signatures, usernames, avatars, and public attachments can be seen without an account where forum permissions allow. Search engines and other crawlers may index public discussions. People may copy or quote them. Our sitemap and machine-readable site guide list public areas, not private messages or account-management pages.

Your account email address is not displayed as a public profile field by default; member-contact features and your own settings may allow other members to contact you. If you put your email address in a post or signature, it becomes public like that content. You can review profile, visibility, and contact preferences in the User Control Panel.

Private messages are stored on our systems and are not end-to-end encrypted. They are intended for their recipients, who can copy, forward, report, or disclose them. Authorized personnel may access relevant stored information where reasonably necessary for support, security, abuse investigations, legal compliance, or protecting rights. Do not treat private messages as a secure channel for sensitive records. Deleting your copy does not necessarily delete a recipient’s copy or retained backups.

Uploaded files may contain embedded location or other metadata. We do not promise to strip it automatically. Remove unnecessary metadata and personal details before uploading. Posts that load externally hosted images may cause your browser to contact that host, exposing technical information such as your IP address to it.

4. Cookies and similar technologies

Back40 uses first-party cookies for sessions, login preferences, and forum functionality. The main cookie names currently begin with phpbb3_8vawm: _u identifies the forum user, _sid associates a browser with a session, and _k supports persistent login when selected. Additional forum preference or read-tracking cookies may be used by enabled features. Session and cookie lifetimes differ; a cookie can remain after a server session expires. Current core cookies can be issued for approximately one year, and “Remember me” may keep you signed in across visits until the credential is invalidated or cleared.

Cloudflare provides network delivery and security in front of the forum. Depending on the protections used for a visit, it may set security or challenge cookies and process IP addresses and request information. See Cloudflare’s privacy information and cookie descriptions. These functions are distinct from advertising tracking.

You can manage cookies through your browser and use the forum’s “Delete cookies” control. This can sign you out or reset preferences; it does not delete your account, posts, or server records. Avoid “Remember me” on shared devices. We do not represent that a general cookie notice is consent to advertising trackers.

5. Advertising, affiliate links, and future tracking

We plan to support Back40 through advertising and affiliate relationships. As of this policy’s effective date, we have not enabled a third-party advertising network, advertising pixels, or marketing analytics tags in the forum application. Cloudflare Web Analytics is active: its browser beacon measures page views and page performance. Ordinary operational and security logs also remain in use. We do not currently sell member account information or disclose it for cross-context behavioral advertising through such integrations.

If advertising or analytics tools that use personal information are introduced, we will identify the relevant practices and providers, update this policy, and provide consent or opt-out controls required by applicable law before enabling the relevant processing. A future feature is not authorized merely by this paragraph. Where applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, the relevant controls must honor it. Browser “Do Not Track” signals currently do not change essential forum processing.

An affiliate link can take you to a retailer or partner that processes information about the visit or purchase under its own policy, and may use an identifier to attribute a referral. A commission relationship will be disclosed near the link. We do not receive your payment-card details from a retailer merely because you used an affiliate link. Review the destination’s privacy and cookie choices before purchasing.

6. Who may receive information

• The public and other members, as described above and according to the visibility of the content or feature you use.
• Service providers, including InMotion Hosting for hosting and related infrastructure, Cloudflare for network delivery and security, and providers engaged for backups, technical support, or communications when needed. Access should be limited to the functions they perform for us and applicable obligations.
• Authorized administrators, moderators, and advisers, to the extent needed for their responsibilities, including investigating reports and managing legal matters. Moderators do not receive unlimited access merely because of their title.
• Authorities or other parties when legally justified, including to comply with valid legal process, address fraud or security threats, protect people or rights, or establish and defend claims. We assess requests under applicable law rather than treating every informal demand as sufficient.
• A successor operator, if Back40 is involved in a reorganization, sale, or transfer, subject to applicable law, appropriate confidentiality safeguards, and notice or choices where required. This is not permission for an unrelated party to ignore this policy.
• Anyone you direct us to share with, within the scope of your request or consent.

Common ownership does not mean your account details are automatically provided to other group businesses for their marketing. We do not promise that information is never disclosed; the specific uses and disclosures described here are necessary to explain how the forum operates.

7. Retention, account closure, and security

Account information is generally retained while an account remains active or otherwise needed to operate it. Public discussions may remain available for the life of the discussion or forum; account closure does not automatically remove every post. Private messages may remain in recipient accounts. Security, moderation, acceptance, and request records may be retained while needed to investigate abuse, document obligations, resolve disputes, or meet legal requirements. Retention decisions consider purpose, sensitivity, necessity, and applicable law.

We assess deletion requests according to the information involved and applicable legal requirements. Information no longer needed should be deleted or de-identified, subject to legitimate retention requirements. Backup copies may persist until they are rotated or replaced, and information subject to a legal preservation obligation may be retained longer. Restoration from backup requires care to reapply prior deletion decisions where appropriate. Independent copies held by third parties are outside our direct control.

We use measures intended to protect the forum, including HTTPS, password hashing, permission controls, and security protections supplied by our infrastructure providers. No system can be guaranteed secure. If an incident triggers notice obligations, we will provide required notices in accordance with applicable law; a general disclaimer does not remove those obligations.

8. Access, correction, deletion, and other privacy choices

You may review available profile and notification settings in the User Control Panel. Contact us to request access to or a copy of account information, correction, account closure, removal of identified content, or deletion of personal information. Depending on your location and the law’s applicability, you may also have rights to portability, restriction or objection, withdrawal of consent, limits on sensitive-data processing, or opt-out of sale, targeted advertising, or certain profiling. We will not require you to waive nonwaivable rights or unlawfully discriminate against you for exercising them.

Send your request from the email associated with your account where possible, identify the username, and describe what you want us to address. For content requests, include exact URLs. We may verify identity and an authorized agent’s authority in a proportionate way; do not send identity documents or passwords unless we arrange a suitable secure process. Verification is not required where applicable law prohibits it for a particular opt-out. We respond within applicable legal time limits and explain material reasons for denying or limiting a request, subject to lawful exceptions. If a right of appeal applies, reply with “Privacy appeal” and explain the issue. You may also contact the relevant privacy regulator or attorney general.

Deleting an account may make certain features unavailable. Some information may need to be retained for security, legal obligations, another person’s rights, or other lawful exceptions. We will consider whether de-identifying discussion content can address a request while preserving useful context. This policy does not claim every privacy statute applies to Back40 regardless of its scope or thresholds.

9. Adults-only community and international visitors

Member accounts are for people 18 and older. We do not knowingly permit children to register or knowingly collect children’s personal information for member accounts. If you believe a minor has registered or someone has posted a child’s personal information, contact us so we can investigate, restrict the account, and remove or otherwise handle the information as required by law. A minimum-age statement alone does not replace these responsibilities.

Back40 is operated from the United States. Information may be processed in the United States and other locations where our providers operate, which may have different data-protection rules. Where another jurisdiction’s law applies, required legal bases and transfer safeguards must be in place. Visiting from another country does not waive your mandatory rights, and this policy does not itself create a valid transfer mechanism or blanket consent.

10. Changes to this policy

We will update the effective date when this policy changes. Material changes will receive a prominent notice, and any additional consent or choices required by law will be provided before the affected processing. New advertisements, payment features, marketplace features, or data uses require a fresh review of the actual implementation. Privacy promises must match what the site does.

11. Contact Oettinger Management Group

Oettinger Management Group — Back40 Forum
246 Spring St, Suite B
Jeffersonville, IN 47130, United States
[email protected]

Use the subject “Back40 privacy request” and include your username and the relevant request. Do not use a public forum post to send private account information. For immediate danger, contact emergency services; this inbox is not an emergency channel.