Privacy
What is public, what is private, and who handles your data.
| Data | Public exposure | How it is handled |
|---|---|---|
| Display name, handle, state you chose | Public wherever you post publicly. State is shown next to your name and is self-reported. | Kept in the public profile only. Your email or legal name is never copied into it. |
| Email and sign-in details | Never public, never shown to moderators or other members. | Stored in a separate private area used only to sign you in. |
| Legal name | Not collected for ordinary membership. | Collected only if a specific petition, payment or verification step needs it, and disclosed before you give it. |
| Address, date of birth, ID documents | Never public. | We avoid collecting these. |
| Payment method and bank details | Never public. | Handled by the payment provider. We keep identifiers and accounting records, not card numbers. |
| Your thumbs up or down reactions | Only totals are public. | You can see your own reaction. There is no public list of who reacted. |
| Petition signatures | The count is public. Your name appears only if you choose to display it. | Signing records are kept separately from your public profile. |
| Contributions | Totals are public. A donor is shown only if they chose to be. | Some advertising or reportable funding must legally identify a payor or contributor; this is disclosed before you pay and you may decline. |
| Votes in open polls without signing in | Only totals are public. | A cookie with a random number lets your browser vote once and change its vote. We keep only a scrambled form of that number and of your network address, so neither can be read back, and nothing links the vote to you. |
| A ZIP code or city typed to find your representatives | No one. | It is used to show that one page and is not saved to an account or to our database. Like any page address, it can appear in the web server's routine logs. |
| Votes in open polls while signed in | Only totals are public. | Your vote is kept with your account, like any member vote. On a poll open to everyone we also keep the scrambled browser number with it, only so the same browser cannot vote a second time after signing out. |
| IP address, device and security events | Never public. | Kept minimally for abuse prevention. |
| State change history | Private. | Kept for abuse prevention and never published. |
We do not sell your data
We do not sell or rent member data. We do not infer your political affiliation from your posts, location, contacts or donations.
Service providers
Some providers must process some data to run the service. They receive only what they need:
- Hosting and database providers: everything the site stores.
- An email provider: your email address and the sign-in links we send you.
- A payment processor, when payments are turned on: what you enter on its payment page.
- A file storage provider (Vercel Blob): pictures you upload.
- Cloudflare Turnstile, when it is turned on: it runs in your browser on the sign-in page, and when you vote in an open poll without signing in, to tell people from bots.
- An AI provider (Anthropic): the text of a public Bray when a member taps “Check this” and editors research it, and the news research our editors run.
- Other websites: an embedded video or post you tap to play, or a link you open, loads from that website, which then sees your visit.
We cannot promise that no one but a single administrator ever processes your email address; we do promise that public pages, ordinary moderators and routine admin screens cannot reveal private fields.
This page describes how the site is built. It is a working description pending final legal review and is not a substitute for it.