Privacy
We don't watch visitors. We tell members exactly what we keep.
This policy explains the difference. It applies to everyone who reads this site and to people who choose to open a member account.
Effective May 10, 2026.
Visitors
What we do not collect
If you read the site without signing in, we don't track you. There is no analytics tag, no advertising pixel, no fingerprinting script, no session-replay tool, no Google Tag Manager, no Facebook beacon, no third-party CDN that logs your reading.
Standard server access logs (IP, user agent, requested path, timestamp) are produced by our hosting provider, Cloudflare Pages, for the purpose of serving the site and defending it from abuse. We do not query or analyze those logs for marketing, audience segmentation, or behavioral profiling, and we do not retain copies on our own infrastructure.
We do not set advertising cookies. We do not sell, rent, or share data about you, because we don't have any to sell.
Members
What we collect, and why
A member account is opt-in. You enter your email and we send a one-time sign-in link. We never set a password, because we never want to store one. Below is the complete list of what's stored once you sign up, what each item is for, and what we do not do with it.
Email address
Used to send the magic sign-in link and any account-critical message (e.g., a security disclosure that affects you specifically). We never email a newsletter or marketing campaign. We will never send anything on your behalf to a representative or any third party.
ZIP code and state
Used to look up your federal and state representatives. Stored on your member profile so you don't have to re-enter it each visit. You can edit or remove it at any time from your member settings.
Cached representatives
When you submit your ZIP, we call the Geocodio API to retrieve your federal and state legislators and store the result on your profile so subsequent page loads don't re-query the third party. The cache is rebuilt on demand from your member settings page.
Action log
If you mark an action as completed (e.g., "I called my senator about S. 1234"), we record the action ID and a timestamp on your account so you can see what you've done. We do not infer political views from this log, do not share it with anyone, and do not use it for any purpose other than showing it back to you.
Letters you've sent
When you click "I sent this" after using a letter template, we record the template's slug and the representative's name on your action log so you can see what you've sent over time. We do not store the body of the letter you sent — once you copy it from the personalize panel, the personalized text exists only in your clipboard and your sent mail. We do not transmit the letter anywhere on your behalf.
Authentication session
While you are signed in, we set an HTTP-only, secure cookie that holds an opaque session token. It exists only to keep you signed in across page loads. It is not used for tracking and contains no personal information.
Third parties
Who else handles your data, and for what
We use a small number of third-party services to operate the site. Each of them has its own privacy policy that supersedes ours for the data they hold. We've listed them below with what we send and why.
- Cloudflare Pages hosts the site and provides DDoS protection. It sees all traffic and produces standard access logs.
- Cloudflare D1 is the database that stores member account data, the action log, and generated letters. D1 is a SQLite database that runs on Cloudflare's infrastructure; the data does not leave Cloudflare. Application code enforces that members can only read and write their own records.
- Amazon Web Services (Simple Email Service) delivers magic-link sign-in emails. We send only the recipient address and the sign-in URL. AWS does not see any other account data, and we do not embed open- or click-tracking pixels in the email.
- Geocodio receives your ZIP code when you ask the site to look up your representatives. We do not send your name, email, or any other personal information.
- Anthropic processes the prompts we send when you generate a letter or when an editor generates a research brief. We send only the issue context and any details you've explicitly typed into the drafting form. We do not send your email, ZIP, action log, or other profile data.
- Google Fonts serves the site's typefaces. Your browser fetches font files directly from Google's servers when you load a page.
Your rights
What you can ask us to do
Members can do the following at any time:
- Read what we have on you. Email privacy@americansforpropriety.org from the address on your account and we will send you a complete export of your record within 30 days.
- Correct what we have on you. Most fields (ZIP, state, name) can be edited directly in your member settings. For anything you can't edit there, email us.
- Delete your account. Go to your member settings and use Delete my account — it removes your record, action log, and saved settings immediately and irreversibly. If you've lost access to your account, email privacy@americansforpropriety.org instead.
- Withdraw consent. You can stop using your account at any time. Once deleted, none of your data persists in our systems.
These rights apply regardless of where you live. If you are in California, the EU, or another jurisdiction with specific data-protection rules, the same process satisfies a CCPA, GDPR, or comparable request.
Cookies
What we set, and why
We set exactly one cookie, and only after you sign in: an HTTP-only, secure session cookie used to keep you authenticated. It expires when your session does. We do not set any cookie for an unauthenticated visitor.
Children
Under 13
This site is not directed at children under 13, and we do not knowingly create member accounts for them. If you become aware that a child has signed up, please email us and we will delete the account.
Changes
When this policy changes
If we make a substantive change to this policy — adding a third-party service, changing what we collect, expanding what we do with member data — we will update the effective date at the top of this page and email any active members at least 14 days before the change takes effect. Editorial revisions (clarification, formatting, typo fixes) do not trigger a notice.
Questions about anything on this page can go to privacy@americansforpropriety.org.