Privacy

This page describes what this site collects about you and what each thing is used for. It is a description, not a list of promises. The first half is what is true today. The second half is what accounts and email alerts will collect once they are built — written now, before any of it exists, so the description comes first and the collection second.

What is collected today

• There is no account system yet, so the site itself keeps nothing about you. Every page is static, built ahead of time from a dataset the operator maintains.
• The site is delivered by Cloudflare. Like any company that delivers a website, Cloudflare receives the requests your browser makes and keeps its own server logs of them, which it reports back to the operator as counts. That is a record of your reading, it is used to see whether the site is up and how much it is being read, and it is outside the operator's control.
• Reading the record needs no account. Every bill, topic and member also has a feed you can follow in a feed reader without signing up for anything. A feed reader polls on a schedule, so following a feed is a recurring request pattern in those same server logs.

What will be collected when accounts ship

Accounts, email alerts and profiles are planned, not built. None of this exists yet and nothing below is being collected today. When they arrive, the site will hold these things about you, for these reasons, and the operator can read all of them:

• Who you are: your email address, whether it has been confirmed, a scrambled form of your password, and when you signed up. Used to let you sign in and to tie everything below to you.
• An email address you have given but not yet confirmed, and the one-time code sent to confirm it. Used to check the address belongs to you; the code is deleted once you use it.
• What you follow: which bills, topics and members, and how often you want to hear about them. Used to decide which alerts to send you and which to leave out.
• Your settings and your answers to anything the site asks you — including the grade weights you choose and the stance questions you answer. Used to show you the site the way you set it up and to show you your own answers back over time.
• Which alerts have already gone to you and when. Used so the same alert is not sent twice, and so a failed send can be retried.
• Where to reach you: your email address, and a phone number only if text alerts are ever added. Used to address the message.
• A public profile, only if you choose to make one. Used to show what you chose to publish to anyone who visits it. Published means public.

This describes what the features need. It is not a guarantee that nothing else is ever kept. If the list grows, this page is rewritten before the thing that grew it ships.

Your profile is the part other people can see

Everything else in that list is between you and the operator. A profile is the exception, and it is off until you turn it on: there is an explicit publish step, and anything you choose to publish on your profile is public — readable by anyone, and by anything that crawls the web. Nothing reaches a profile by default.

Deleting your account

Deletion is real deletion. Asking for your account to be deleted removes its rows across every one of the things listed above, rather than flagging them as hidden. Leaving an alert list is separate and simpler: every email carries an unsubscribe link that works without logging in.

Who else sees it

Cloudflare, the same company that delivers this site, is also the company that will send the email. It therefore receives your email address and the text of every message sent to you, and it keeps its own records of that, which can be demanded from it directly. Email is the only alert channel being built. A phone number, and the phone company that would carry the message, only come into it if text alerts are ever added — and that is not decided.

Numbers published about readers

No figure on this site today is drawn from what readers do, because nothing is collected about readers today. If one is ever published — how many people follow a bill, say — the rule it has to clear is written down already: it is published only if it covers at least 50 people. Below that it is not published, because a small enough group is a group someone can be picked out of.

The threat model is the long version of this page: what someone could learn about you, and what a legal demand would produce.