Privacy policy

The short version

We collect as little as we can, we never sell it, there are no third-party trackers on this site, and you can delete everything we hold with two clicks.

What we collect

If you sign the petition

• First name, last initial, state, your relationship to the issue, optionally years affected and a short statement.
• Your email address — stored encrypted, plus a salted one-way hash used to stop duplicate signatures. No public endpoint on this site can return an email address.
• A salted hash of your IP address and browser user-agent, kept for abuse investigation only. The raw values are never written to storage.

If you submit a story

• What you type, the display name you choose, optionally a state, a year and a photo.
• Your email, handled the same way as above.
• Uploaded images have embedded metadata (including GPS location) stripped before storage.

Everyone else

Nothing that identifies you. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors. There is no Google Analytics, no advertising pixel, no social SDK, and no third-party JavaScript beyond Cloudflare's bot-protection widget on the two forms.

Why there is no cookie banner

Because we do not set tracking cookies. The only browser storage this site uses is a local preference for light or dark mode, which never leaves your device.

Who we share it with

Nobody. We do not sell, rent, trade or disclose personal information. The only exception is a valid legal order, and if we ever receive one we will notify the affected person unless we are legally barred from doing so.

How long we keep it

Signatures are kept as long as the petition is active. Unverified signatures are deleted after 30 days. Rejected story submissions are deleted after 90 days. Abuse hashes are kept 12 months.

Your rights — export and deletion

Every confirmation email contains a personal management link. From it you can download everything we hold about you as JSON, or delete it. Deletion removes the database row; it is not a soft delete and it is not recoverable. If you have lost the link, email us from the address you signed with and we will send a new one.

These rights are available to everyone, not only residents of California or the EU.

Children

This site is not directed at children under 13 and we do not knowingly collect their data. A parent or guardian may submit a story about a child, and should not include the child's full name.

Security

Data is held in Cloudflare D1 and R2 in the United States. Encryption keys and hashing salts are stored as platform secrets, never in the source repository. Administrative access is restricted by Cloudflare Access with two-factor authentication.

Changes

Material changes will be announced on the site and dated here. Contact: [email protected].