Privacy Policy

• We do not sell your personal data — ever.
• We collect only what we need to run the Platform and what you choose to share.
• Sensitive information (demographics, voting preferences) is strictly optional and used only in aggregate.
• Your real name, if provided, is used for accountability and is never shown publicly.

When you create an account, we collect:

• Required: first name, last name, email address, a username, a password (stored only as a salted hash — we never see your actual password), and your city, state, and ZIP code (used to localize the voter information we show you).
• Optional: street address and phone number.
• Optional & sensitive — your choice: self-reported demographic information and voting-preference information. Providing these is entirely voluntary; they are never required, never sold, never displayed publicly, and are used only in aggregate (for example, to understand our audience as a whole). You can leave them blank or remove them at any time from your account.

Your legal name is private: public contributions you make (votes, comments, proposed edits) show only your chosen display name or username, not your real name.

Votes, comments, flags, disputes, and proposed edits you submit are stored with your account. Because the Platform keeps a tamper-evident, append-only record, contributions that are later hidden or removed are retained in our audit history rather than permanently deleted — see “Data retention” below and Terms §11.

Donations are processed by Stripe. We receive a record of your donation (amount, date, frequency, and the name/email you provide at checkout) but we never receive or store your full card details — those go directly to Stripe under its own privacy policy.

To keep the Platform secure and working, we log limited technical data such as IP addresses and request metadata in our security and audit logs. We also maintain our own cookie-free first-party usage analytics (page-level traffic only, no PII stored). We use Google Analytics (via Google Tag Manager) to measure aggregate traffic. Google Analytics may collect data about your visit under Google’s Privacy Policy. We do not use cross-site advertising trackers or sell your data to advertisers.

• operate your account and let you contribute;
• localize the officials and races we show you (city/state/ZIP);
• send transactional email (verification, password reset, donation receipts);
• maintain the integrity and security of the Platform; and
• understand our audience in aggregate to improve the service.

We do not sell personal data. We share information only with service providers that help us operate (for example, Stripe for payments and our email provider for transactional mail), and when required by law or to protect rights and safety. Public-record data about public figures is sourced from government databases and is public by law.

You can view and update your profile, and remove optional fields, from your account. Note that the Platform’s append-only audit record means published contributions are retained in the audit history even after being hidden, so there is no guaranteed right to permanently erase content you have posted (Terms §11). For account or data requests, contact us through the contact form.

Passwords are stored using salted PBKDF2 hashing; we use encryption in transit (HTTPS) and restrict access to personal data. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

The Platform is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it where required.

We may update this Policy; we will revise the effective date and, for material changes, give reasonable notice. Questions or requests may be submitted through our contact form. We do not publish a direct email address.