Privacy & data use

Visitor counts stay on

Listed app pages send a pathname-only counting signal while visible. The server processes the connection’s IP address and stores a protected, keyed identifier derived from it, with first- and last-seen times. Raw IP addresses are not stored in the visitor-count database. Lifetime counting identifiers have no automatic expiry.

Public visitor statistics show aggregates, not IP addresses or individual visitor records. IP addresses are not people: shared networks, VPNs and changing addresses affect the counts. Daily geography uses approximate Cloudflare country/region information; small daily location groups are combined rather than named.

Detected Do Not Track or Global Privacy Control signals prevent new counting. They do not erase existing records. This notice page does not run the counting script.

You choose your location

You can choose a country, state or county manually. Automatic country/state suggestions use network information supplied by Cloudflare. The app does not send your raw IP address to separate IP-location services for these suggestions. Network suggestions are approximate and do not establish where you live.

Phone location is optional. Only an explicit location action asks for browser permission. Opening Local elections can make that request automatically when no local manual override is selected. If allowed, a U.S. county lookup sends coordinates to the app and official U.S. Census/FCC geocoding services to verify a state and county. A coarse country match can instead use the existing generalized map entirely on your device; uncertain places remain unresolved. Coordinates are used only for the current lookup and are not saved by the app, placed in the app address or sharing links, or published with contributions. The resulting country/state/county is a viewing choice, not your registered voting address or ballot. Deny permission or choose a local area manually to keep that choice; Use phone location returns to an automatic check.

Posts and video are public when you publish

Community contributions are separate from sourced election results. Posting can make your text, video, caption, time and any location label you choose public. Contributor-location sharing starts off. Camera/microphone access follows an explicit action and browser permission; recording or choosing a file does not itself publish it.

Uploaded videos keep their original file bytes; metadata is not stripped. A file may contain information such as recording location. Review it before consenting to public publication. Do not post private documents, passwords or information you do not want other people to see.

Published posts and videos have no automatic expiry. Your browser’s ownership cookie supports own-post controls. Deletion can leave a database tombstone, and media cleanup may fail or take time; immediate complete erasure is not guaranteed.

Optional alerts and browser data

Preferences, watchlists and ordinary quiz practice can stay in your browser. Optional shared quiz rounds, viewing-room joins and race follows use browser-owned identifiers on the server. Clearing browser data can remove your preferences and access to your own-post controls; it does not delete server records.

Email/text contact features work only where a delivery service is configured, after your consent and destination verification. You do not need to provide an email address or phone number to browse. Contact details are not a public directory; a configured delivery provider receives them to send messages. Verified contacts have no automatic expiry; removal/unsubscribe controls remove the contact and related delivery jobs. Configuration alone is not proof that a message was delivered.

Other services and retention limits

Cloudflare hosts the app, application records and uploaded media. Some app pages load Google Fonts, which sends normal browser network information to Google. Opening a cited source takes you to that publisher’s site and its own privacy practices. This privacy page uses system fonts and same-site assets.

Daily geography has bounded cleanup around a 90-day window; that is not an exact deletion deadline. This notice does not establish how long hosting, geocoding, font or delivery providers retain their own logs or backups.

Questions about the app can be raised through app feedback. Feedback is public: do not include private contact, payment or identity details.