Privacy

Last updated September 25, 2026 · draft pending review

The short version

You can use almost everything here without an account. We never sell or rent personal data, never use it for advertising, and never share it with campaigns or parties.

Nothing we offer depends on whether, or how, you vote.

Looking up an address

To find your governments we send the address you type to the U.S. Census Bureau geocoder. To find a polling place we may also send it to Google’s Civic Information API. We keep the Census block and district identifiers that come back, not the address, unless you create an account.

Suggestions while you type come from our own copy of OpenStreetMap on our own server; what you type is not stored, logged, or sent to anyone else.

While you look, the address sits in an encrypted cookie that expires after 15 minutes. It never appears in page addresses (URLs), so it does not end up in browser history, server logs, or links you share.

Checking your registration

Where a state publishes its voter list (Oklahoma first), you can check your registration with your name and date of birth, the same details the state’s own lookup asks for. What you type is turned into a one-way code on our server, compared, and discarded; it is not stored or logged. We only count that a check happened and whether it found a match.

We do not keep a readable copy of the voter list. We store no names, birthdates, addresses or voter ID numbers: each registration is filed under a keyed code that can only be recomputed from a name and birthdate someone types. Beside it we keep what the state shows for that registration: status, party, registration date, precinct, and the dates and methods of past votes. A stolen copy of our database would identify no one.

Checks are limited to visitors in the United States and to a few an hour, so the tool cannot be used to trawl the list. Nothing here depends on whether you vote.

If you create an account

We store your phone number (you sign in with a one-time code), your address encrypted with AES-GCM, and the districts it falls in. Optionally: a display name, an email address you verify, your time zone, your voting plans, and elections you tell us you voted in.

You can download all of it as a file, sign out on every device, or delete your account from your account page. Deletion removes your record and everything linked to it.

Messages

Election reminders by text or email are not switched on yet. When they are, you will choose them explicitly, every message will say how to stop, and this page will list the delivery providers first.

Measurement

We count page views and a few steps (a lookup, a sign-up, a saved plan) to learn what helps. Account-linked events lose their link to you after 400 days. Cloudflare Web Analytics measures page loads without cookies or cross-site tracking.

How long we keep things

• One-time codes and email links: deleted a day after they expire.
• Cached district and polling-place lookups: 7 and 30 days.
• Message text: removed after 30 days; delivery records after 90.
• Rate-limit counters (which include IP addresses): 2 days.
• Account data: until you delete your account.
• Encrypted backups: rotated out within six months.

Cookies

A sign-in cookie (30 days), the short-lived encrypted lookup cookie above, and, if you arrived from a partner link or flyer, a 30-day cookie holding only that tag (for example flyer-ok) so we can count which channels help. Your light or dark theme choice is kept in your browser’s local storage, not a cookie. No advertising or third-party tracking cookies.

Security

Traffic is encrypted in transit; addresses are encrypted at rest; sign-in attempts are rate-limited; staff access is logged. Report a vulnerability through the contact page.

Changes

Material changes are announced on this page before they take effect, with the date above updated.

Questions about this page? Contact us.