Privacy
Version 2.1, revised November 4, 2026
What we collect when you sign
- Your first and last name, email address, ZIP code, state, and congressional district.
- Whether your district came from your address (“address-matched”) or you chose it (“self-selected”).
- Whether you chose to show your first name, last initial, and district publicly.
- Any comment you write.
Your street address
If you enter a street address, our server sends it with your ZIP code to the U.S. Census Bureau’s public geocoder (geocoding.geo.census.gov) only to find your congressional district. We do not store your street address. We keep only your ZIP code, state, and district.
What is public
Only district totals, and, if you opted in, your first name, last initial, and district. Approved comments appear under that name or as “Anonymous signer”. We never show your email.
How long we keep it
- Your email and signature: until you withdraw.
- Unconfirmed signatures: deleted 30 days after the confirmation link expires.
- Moderation records (decisions about comments): two years.
- Backups: database backups roll off within 30 days, so deleted data leaves backups within 30 days.
- Abuse-prevention records: a one-way hash of your IP address, kept for 10 minutes.
- Letter tallies: the visitor hash is replaced after 2 days; the anonymous counts are kept.
Withdrawing
Withdraw your signature at any time. Withdrawal deletes your signature record (name, email, ZIP, state, district, and choices) and every comment you wrote. Your signature is removed from all counts. Letter tallies are anonymous and are not affected.
Letters to Congress
When you copy, email, or print a letter, or tell us you sent it, we record the district, the official, the day, and what happened (“prepared” or “reported sent”), with a one-way salted hash of your IP address and browser so each visitor is counted at most once per official per day. We never see the letter text, your name, or your address in those boxes. After you confirm a signature, we set a cookie on this device so your letters can say “I have signed”; it holds only a random code and is removed from use when you withdraw.
Sharing
We do not sell or share signer information. Email confirmations are sent through Cloudflare. Bot protection uses Cloudflare Turnstile.