5426 Vending LLC
Privacy Policy
This policy describes how the public website operated under the brand 5426 Vending handles information. The legal operator is 5426 Vending LLC. It is written from the website's current application code and should be reviewed by a qualified California attorney before the company relies on it as its final privacy notice.
Information the contact form collects
The website presents one inquiry form, titled Request Service. The fields a visitor is asked to complete are:
- Full name
- Business name
- Email address
- Phone number
- City or location
- Service requested
- Message
The service choices on the form are Vending Machine Placement, ATM Placement, Specialty Machines, Billboard Advertising, Machine Repairs, and General Inquiry. The form also includes a hidden field named for spam filtering and a timestamp used to reject submissions sent too quickly to be a genuine inquiry. Those checks are not used to evaluate a location or to build a marketing profile. If the hidden field is filled in, the application discards the submission and does not email it.
Technical data
The application does not include an analytics product, advertising pixel, or customer database. It does use a small amount of technical data to operate the inquiry endpoint.
- The server reads the connecting IP address from the
x-forwarded-fororx-real-ipheader, when a host provides one, and keeps recent request times in the server process's memory. That memory is used only to limit an address to eight inquiry attempts in ten minutes. It is not written to a database, and it is lost when the process restarts. - The application reads the request's content type and size so it can reject a body it cannot process or a body that is too large.
- If email delivery fails after it has been configured, the server writes an error to its process log. The log line is an error description, not a copy of the inquiry.
This repository does not name a hosting vendor and does not configure a separate logging or analytics service. A hosting provider may keep its own connection logs, including IP address, user agent, and the time of a request. Those logs, if any, are controlled by the host rather than by a setting in this application. No hosting vendor is identified here because none is configured in the project.
How information is used
When an inquiry is actually delivered, the intended uses are:
- Responding to the inquiry.
- Evaluating a potential service location or the service the person asked about.
- Communicating with the person about that request.
- Coordinating a potential business relationship.
- Keeping the website and the inquiry endpoint available and resistant to abuse.
- Complying with a legal obligation that applies to the company.
The application does not include a mailing list, newsletter, advertising audience, or other marketing program. This policy does not describe marketing use because the website does not implement one.
Contact form delivery
The inquiry endpoint delivers a message only when three settings are present: an API key for the email provider Resend, a recipient address, and a from address. In the project as reviewed on October 28, 2026, those settings are not configured. While they are unset, the endpoint refuses the submission, tells the visitor that email delivery is not configured, and does not store the message as a lead. The company therefore cannot treat a form submission as received until delivery is configured and working.
When those settings are present, the application sends the form fields in an email through Resend to the configured recipient, uses the visitor's email address as the reply-to address, and includes a short reference code. The application still does not save a database copy. What happens to the email after it reaches the recipient mailbox, and what Resend retains under its own terms, is not set in this project.
Service providers
The categories below are the ones this application actually implements.
- Website hosting. The site is a Next.js application. The project does not name the company that hosts it.
- Email delivery. Resend is the email provider in the application code. It receives inquiry content only when the delivery settings described above are configured. They are not configured in the reviewed project.
- Security and operation. Rate limiting and input checks run inside the application. No separate security vendor is configured.
No analytics provider and no advertising network are included in the application. Typography is served with the website through Next.js font files. The application does not send page views to a font or analytics service at the time someone opens a page.
Cookies and tracking
The application code does not set analytics cookies, advertising cookies, or tracking pixels, and it does not load an analytics or advertising script. It also does not include a cookie-consent banner, because no analytics or advertising cookie was found to consent to.
This policy does not claim that a browser or a hosting provider can never set a technical cookie or keep a log. Those practices, if they exist, are outside the application code reviewed for this policy. The site does not respond to a Do Not Track signal because it does not run the kind of tracking program that signal is meant to limit.
Sharing of personal information
The application does not include a feature that sells personal information, rents a list, or shares information for cross-context behavioral advertising. Whether any disclosure is a "sale" or "share" under California law depends on facts this website code cannot establish, including contracts and practices outside the repository. This policy therefore does not certify that information is never sold.
When email delivery is configured, the form contents are disclosed to Resend and to the configured recipient so the business can read and respond to the inquiry. The application has no other disclosure feature. Hosting logs, if the host creates them, are available to that host. The company may also disclose information if the law requires it.
Retention
The application does not keep a durable copy of an inquiry. An undelivered submission is rejected and not stored. Rate-limit records stay in process memory only for the ten-minute window, or until the process restarts, whichever comes first. If delivery is later configured, retention of the resulting email depends on the mailbox and on Resend. No fixed retention period is stated here because the project does not define one. Hosting logs, if any, follow the host's own schedule, which is not set in this repository.
Data security
The application checks inquiry fields before accepting them, limits repeated submissions, discards submissions that fill the spam field, and sends common browser security headers. Those measures reduce obvious abuse. They are not a guarantee of absolute security, and the company does not claim a security certification or a particular encryption standard beyond what the hosting environment and the email provider supply when they are used. No database of inquiries exists in this application to encrypt.
California privacy rights
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to businesses that meet its thresholds. This policy does not assert that 5426 Vending LLC meets those thresholds. If the law applies, a California resident may have the right to request access to, correction of, or deletion of personal information the business holds, and to opt out of a sale or share of personal information or of certain automated profiling. Those rights are subject to the exceptions in the statute.
The website does not include a "Do Not Sell or Share" control because the application has no sale or share mechanism to switch off. The absence of that control is not a legal conclusion that the company is exempt. An authorized agent may submit a request where the statute allows it. The company will need enough information to understand the request and to confirm that it concerns the person making it.
Other U.S. privacy rights
Residents of other states may have access, correction, deletion, or opt-out rights under the law of the state where they live. Those rights differ, and many of them apply only to businesses above a statutory threshold. This website does not decide which statute applies to a particular person. A request can be considered under the law that actually applies to the company and to that person.
Children's privacy
The website is intended for business inquiries. It is not directed to children under 13, and the company does not knowingly collect personal information from children through it. The site does not use an age-verification system. A parent or guardian who believes a child submitted information may use the contact method below once one has been approved.
External websites
If you leave this website for another site, that site's privacy practices apply to information you give it. This policy covers the 5426 Vending website only.
Changes to this policy
5426 Vending LLC may update this policy by posting a revised version on this page. The version date at the top identifies the posted version. The revised policy applies to information handled after it is posted. The page itself is the notice of the change.
Privacy requests and contact
Contact method requiring approval. No public email address, telephone number, or mailing address is configured for privacy requests. The contact form cannot be described as a working request channel while email delivery is unconfigured, because those submissions are rejected and are not stored. Until 5426 Vending LLC approves a contact method that reaches the business, this page does not provide a completed way to submit a privacy request.