Useful public records. Private research.

The My Ballot topic picker holds your selected topics only in the current page’s memory. It does not send those selections to Electionpedia, save them to browser storage, or include them in shared ballot links. Topic selections reset on reload.

The Run for Office help form is a separate, opt-in submission. It stores your name, reply email, state or territory, optional office, stage, requested kind of help, consent version and submission time in private Vercel Blob storage. Authorized administrators review requests. We do not publish the request, join it to your ballot research, create a candidate profile, or subscribe you to a newsletter. A reply is not guaranteed.

We retain requests for follow-up until removed by an administrator or at your request. Email jack@election.org with your submission reference to ask for access, correction or deletion. Abuse controls use a keyed, daily connection hash rather than storing a raw IP address in the request record. Normal hosting logs may retain connection information. Do not submit political views, identity documents or a home address.

When you submit a quote request, we save your selected service, requested views, target date, name, candidate or campaign name, email, phone number and submission time in private Vercel Blob storage. We send the request to Anthony at Electionpedia through Resend so our team can follow up. A quote request does not make a booking, take payment or subscribe you to marketing.

The private quotes pages do not run analytics or session replay. We retain requests and notification records for follow-up until removed by an administrator or at your request. Contact anthony@election.org with your request reference for access, correction or deletion. Abuse limits use keyed hashes of the connection address and email; raw connection addresses are not stored in the quote record. Normal hosting and email-provider logs may retain connection and delivery information.

We use Vercel Web Analytics and Speed Insights to understand which pages help people and where loading is slow. We measure page views, search submissions, whether a lookup returned results, and categories of links opened. We also measure whether the API record viewer loaded records, returned an empty result, or failed, grouped by broad record type. Custom action properties contain tool categories, not entered searches, names, addresses, coordinates, record IDs, or the contents of results.

We remove query strings and fragments from analytics URLs except for a fixed list of public campaign labels: source, medium, campaign and content. We use these labels to count visits from tagged outreach links and broad research actions during the current page session, including navigation within the site. Labels stay in page memory and reset on a full reload; they do not identify a person or link visits across days. Unknown labels, search terms, click IDs, email addresses, address entries and authentication tokens are removed. Performance measurements exclude all query parameters. Authentication, claim, administration, and hosted community-project routes are excluded. These analytics do not use advertising cookies; Vercel describes its daily, non-persistent visitor identifier in its privacy documentation.

Your choice on this browser

We honor Do Not Track and Global Privacy Control for these analytics. You can also opt out below. This choice is saved on this browser only; it is useful for excluding your own development and testing visits.

An address lookup requires sending your entry to the lookup service and its disclosed geocoding providers. Depending on the entry, these may include the U.S. Census Bureau, OpenStreetMap, and Zippopotam. The lookup screen explains its source and precision. The forms send entries privately rather than putting them in page links or browser-history URLs. A handoff between our pages temporarily keeps the entry in this tab’s session storage. When the official Google Civic Information connection is enabled, the server may also send your entry to Google to retrieve official voting locations and contests. Entries are not added to our public-record database. Normal hosting and lookup-provider logs may retain request information.

Private ballot notes and selections stored by the workspace remain on your device. Sending a correction, profile claim, subscription, or project is a separate, explicit submission; review its form before sending personal information.

Questions or corrections

Contact hello@election.org. See our public-record methodology for source and accuracy limits.

Selected midterm and candidate pages offer Polymarket’s own market charts. Candidate and midterm widgets load automatically as you approach the market section; no Load button is required. Switching between already-viewed House and Senate markets keeps their widgets mounted on that page. Leaving the page or reloading may reconnect the widgets. When a widget loads, your browser connects directly to Polymarket, which receives normal connection information such as your IP address and browser details. Electionpedia does not send address lookups, private ballot notes, or search entries to these widgets. We suppress the referring page URL and disable the widget’s trading buttons.

Our Electionpedia analytics opt-out does not control third-party widgets. Browser privacy tools may block them; direct source links remain available. No affiliate tracking is enabled on these candidate-market links. Review Polymarket’s privacy policy for its own data handling.

Feature suggestions are stored privately in Vercel Blob until an Electionpedia moderator approves publication. The title, description and category of an approved suggestion become public; review notes remain private. This form does not ask for a name or email address, create an account, subscribe you to a newsletter, or send your suggestion to an AI provider.

We retain suggestions and review decisions to handle moderation and disputes. Please do not submit private information. Contact us with your submission reference to request removal of personal information. Abuse controls use a salted hash of the connection address; the voting cookie prevents repeat votes in the same browser. Normal hosting logs can also contain request information.

The corner feedback form uses the same private moderation queue. If you include the current page, we store only its path for moderators, never its query string or fragment. That page context is not added to the public suggestion. Drafts stay in the open panel and are discarded when it closes; feedback text is not sent to analytics.

Voice typing starts only when you press its microphone button and allow microphone access. Your browser may send audio to its own speech-recognition service under that provider’s terms. Electionpedia does not record or store the audio. Review or edit the transcript before you send it; we receive only the submitted text. Listening stops when the panel closes or the page is hidden. Browsers without speech recognition can use ordinary typing or their keyboard’s dictation.

The read-only MCP connection receives only the tool arguments sent by your AI client: public-record search terms, public identifiers, a requested election year, jurisdiction filters, and result limits. Do not send private conversations, a home address, personal political views, voter files, passwords, or identity documents. We do not request your full conversation, create an account, sell these queries, or use them to build a political profile.

Tool arguments are processed in memory to retrieve Electionpedia’s published data and are not saved by the MCP application after the request. The application logs a tool’s endpoint category if retrieval fails, without query text or returned records. Our hosting provider, Vercel, processes connection information such as IP address, request path, and browser/client headers for delivery and security under its applicable log-retention settings; this is separate from the MCP application’s non-retention of arguments. Your AI provider receives the returned records and handles your conversation under its own privacy policy.

The connection does not set cookies or load advertising or browser analytics. You control which questions to send and may disconnect it in your AI client. Email jack@election.org for privacy questions or a request concerning connection data; do not send the conversation itself. Ordinary website analytics preferences apply to website visits, not your AI provider.

Eligible pages are the homepage, Money, Charts, About, Methodology and Data overviews, without query strings. Page text and images use strict masking; recording stops before form interaction or feedback, and populated form fields block uploads. We send no custom identity, email, ballot choice or political-interest profile. Consent to this pilot does not allow advertising storage or cross-visit tracking cookies. Do Not Track, Global Privacy Control and your traffic-analytics opt-out also disable replay.

Microsoft processes the data; Electionpedia restricts project access to authorized reviewers. Microsoft normally retains recordings for 30 days, with favorites and a randomly selected sample retained for up to 9 months; heatmaps can be available for up to 9 months. We do not export raw recordings, favorite recordings to extend retention, or join replay data to account or ballot information. See Microsoft’s retention information and privacy statement. Turning replay off prevents future collection; it does not erase already received data. Microsoft does not offer individual-recording deletion. Contact jack@election.org about deletion without sending private research details.

We count an opportunity to use a “Continue researching” module only after at least one quarter of it has been visible for one second in an active browser tab. We count at most one exposure and one subsequent link opening per displayed module, grouped by broad page category. These are module opportunities, not unique people or sessions. We do not send the module’s text, candidate names, research choices, or destination URLs in these events. They use the same analytics privacy controls above, stay in page memory, and do not create extra page views or change the bounce-rate definition.

Donations support Electionpedia, operated by Election Powerhouse, Inc.; they are not candidate or political-committee contributions, and we do not promise tax deductibility. Checkout takes place on Stripe, not inside Electionpedia. Stripe processes the amount, contact and payment details you provide under its privacy policy. Authorized account operators can see payment records in Stripe. Electionpedia does not receive your full card number or copy donor details into its public-record database.

Amount links send the suggested gift in USD cents, which you can change before paying, plus a public invitation-request marker only if you check the groupchat option. The marker contains no identity or personal information. General donation controls do not send the page you were researching, its search parameters, or ballot choices to Stripe. A candidate or PAC page’s separate sponsorship link sends an opaque reference to that public page so the gift can be credited to its link-research goal. Stripe and authorized Electionpedia operators can associate that reference with the payment. We store minimal payment proofs in private storage and publish only page totals and gift counts, never donor identities, contact details, messages or payment IDs. Refunded and disputed gifts are excluded. Attribution does not establish a donor’s political views or a candidate endorsement. We measure only generic checkout-link clicks using the analytics controls above; a click is not a confirmed donation. No donor names, amounts or payment identifiers enter these analytics, and the support controls are excluded from session replay. You are not signed up for a newsletter by donating.

Dismissing the top support banner stores only a dismissal flag on this browser and keeps the banner hidden until this browser’s site storage is cleared. Previous dismissal timestamps also keep it hidden. It stores no visitor ID or browsing history. Donation access is available across public pages, including ballot tools and individual records; private account/review areas and embedded views are excluded. The support page keeps manual donation access without a duplicate banner. The Donate and amount links open Stripe directly in a new tab; the heart above Feedback opens Stripe directly; there is no donation dropdown. Clearing browser storage resets the preference. You can always use the Donate link voluntarily.

Monthly membership renews through Stripe until canceled. Email jackson@election.org to cancel future renewals. When membership intake is enabled, signed Stripe events record only private subscription and invoice references, the chosen plan, billing status, paid amount and event time in restricted storage. We do not copy checkout email, messages or card details into this lifecycle log. These records are separate from public page sponsorships and website analytics. Membership does not enroll you in a newsletter or groupchat.

When the checkout offers an optional website-improvement field, the text you choose to enter is sent to Stripe along with your payment. Please do not include personal information, addresses, ballot choices or political preferences. For completed paid donations with a request, Stripe sends a signed payment event to Electionpedia. We keep only the request text, checkout reference, receipt time and private review status in restricted storage. We do not copy the donor’s name, email, amount, card details or raw payment event into the review queue.

Authorized Electionpedia reviewers use the private queue to consider the request. An email alert to the team contains no donor details or request text. A human records the review; the request is not automatically published, counted as a public vote, or added to analytics. Reviews do not guarantee implementation or favorable coverage. Contact jack@election.org to ask about or request deletion of your feedback; Stripe’s legally required payment records are separate. Free feedback and factual corrections do not require a donation.

Election reminders require a separate request and email confirmation. We store your email and chosen state, confirmation times and minimal send records privately. We do not store your street address with reminders or subscribe you to the newsletter. Confirmation-link previews do not subscribe you. You can unsubscribe using every reminder email, including a supported one-click email-provider action. Unsubscribing cancels earlier confirmation links; a new request and confirmation are required to rejoin.

Dates must be reviewed against official state sources before this channel is enabled. These emails link to your election office; they do not claim that Electionpedia has located your polling place. Send records prevent duplicate messages and record provider acceptance, which does not prove delivery or reading. Contact jackson@election.org for deletion or other questions.

The optional Electionpedia tool counter records only a fixed event category: lookup started, resolved or failed; search result-count range; voting-action click; or race-page view. It excludes entered text, addresses, URLs, state or candidate choices, emails and visitor identifiers. Counts are aggregated by UTC day in private storage. Do Not Track, Global Privacy Control and the analytics opt-out above apply. Collection is disabled unless explicitly configured. An unavailable day is not reported as zero activity.

Stripe checkout collects your email and offers an optional private message to Electionpedia. The message stays in Stripe for authorized account operators to read; it is not a public endorsement, roadmap vote or instruction to change a candidate record. Please leave out sensitive personal information. We use confirmed donation records and your email to send a personal thank-you from Jackson. A restricted send record prevents duplicate emails; the email and send record are handled through our authorized Gmail account and private local records. They are not joined to your ballot research or added to analytics.

A donation does not subscribe you to newsletters. Groupchat invitations require a separate, explicit opt-in. The website checkbox starts unchecked and stays only in the open page. Stripe’s optional groupchat choice lets you request an invitation or decline; declining in Stripe overrides a website request. After a verified donation, Jackson can use your checkout email to send the requested invitation. You decide whether to join; groupchat providers and other participants may see the details you choose to share there. Donations of $100 or more include a 15-minute founder call, arranged privately by email using the final paid amount. These choices do not change public facts, ballot ordering or access to election information. Reply to the thank-you or email jackson@election.org for a question, correction or deletion request. Stripe payment-record retention is separate.

The newsletter signup on Election.org sends a confirmation email through Resend. You join only after confirming that you want new tools, election information, and updates from Jackson. We store your email, confirmation time, signup source, consent version and unsubscribe records in private Vercel Blob storage. We also keep minimal pending-confirmation and delivery records to prevent duplicate sends and investigate failures. Confirmation links expire after 24 hours; expiry does not itself delete stored records. We retain these records until removed by an administrator or at your request.

Newsletter details are not public, joined to ballot research, or used to build political profiles. The form and personal confirmation/unsubscribe screens are excluded from analytics and session replay. Abuse limits store purpose-specific connection hashes rather than raw IP addresses. Personal links can appear in browser history and ordinary hosting/email-provider logs; do not share them. Every newsletter email must include an unsubscribe link. You can also contact jackson@election.org from the signup email to ask for access, correction, unsubscribing or deletion.

The optional developer signup stores your contact name, email, project name, declared website, use-case description and verification time in private Vercel Blob storage. Resend delivers a single-use account link to your email. Confirming that link automatically approves a free project; it verifies email access, not a legal identity, domain ownership, a live integration or political affiliation. Websites remain self-reported. These details are available only to the account owner and authorized Electionpedia administrators, not in a public client directory.

We store hashes of verification tokens, account sessions and API secrets, not the full secret keys. The account session uses a secure, HttpOnly, same-site cookie and expires after 24 hours. Keys are read-only, expire after one year and can be revoked; revocation can take up to 30 seconds to propagate. Signup abuse limits use purpose-scoped connection and email hashes rather than raw IP addresses. Hosting and email providers may retain ordinary security and delivery logs under their own settings. Never place API keys in a URL.

Registered API calls record private request counts, successful/error totals, dataset categories, UTC days and first/last-seen times per key. Concurrent calls are grouped into immutable background batches; recording is best effort and may undercount during outages. Earlier daily successful-use observations remain separate. Usage records contain key IDs and project IDs, but never API secrets, queries, returned records, addresses, ballot choices, referrers or raw IP addresses. Anonymous v1 and MCP traffic cannot be matched to a developer contact. Signup does not subscribe you to a newsletter.

We retain account, project and sparse service records to operate access until removed by an administrator or at your request; expiry stops credentials from working but does not itself delete stored records. Contact jack@election.org from the account email for access, correction or deletion. Existing anonymous public v1 and MCP beta requests remain unattributed and are separate from this optional registered service.

Bill Sense records the ideas you choose to support and suggestions you send. You do not need to provide your name or contact details. Suggestions stay private until a moderator approves publication; approved ideas appear as “Community suggestion.” Do not include information you want to keep private.

Choosing Support or Send idea creates an essential, signed browser cookie for up to 30 days. It connects support choices to an anonymous browser identifier, so the same browser does not add the same support repeatedly. The cookie is separate from optional analytics and is not used to infer political affiliation or build a visitor profile. Clearing it or using another browser can permit another support; totals are not verified unique people or election results.

Support identifiers, moderation notes and rate-limit records stay in private storage. Public pages show reviewed ideas and aggregate support counts. The service uses a keyed hash of the connection address to limit repeated submissions; it does not save the raw address in these records. Working notes in the bill worksheet stay on the current page unless you copy them.

Stored suggestions, support records and moderation records remain until removed by an administrator; the browser cookie expiring does not delete them. Contact jack@election.org with questions or a removal request. We may be unable to connect an anonymous record to you. Normal hosting logs may retain connection information separately.

The native iPhone and Android app is independent and does not represent a government entity. Version 1.0.0 has no accounts, advertising, analytics SDKs, session recording or push notifications. It does not request location, contacts, camera or microphone access.

Searches and connection data

When you press Search, the name, city or public-record ID you enter and your optional state filter are transmitted to Electionpedia over HTTPS. Electionpedia and its hosting provider receive standard connection data, including IP address and request URL. The app does not attach an identity, advertising identifier, saved collection or voter profile. Results remain temporarily in app memory, not in an app search-history list. Calendar requests can include a state code. Normal hosting logs may retain connection information.

Do not enter home addresses or other private information into record search. Address-based ballot tools open separately in your browser and follow the website policy and address-processing disclosures above. Website analytics and optional recording choices apply to website visits, not native app screens.

Saved research

Up to 24 public-record snapshots you explicitly save are stored in the device’s iOS Keychain or Android encrypted storage. The app does not transmit this collection to Electionpedia. Remove a snapshot from its native record screen to erase its stored content. iOS Keychain entries can persist after uninstalling; remove snapshots before uninstalling if you want them erased. Snapshots are not guaranteed backups and are not automatically refreshed.

Sharing and external sources

Sharing opens your device’s share sheet and includes the public record’s name and link only if you choose a recipient. It does not include your collection or search history. External source links and full website records open a browser; those destinations have their own privacy practices. Optional feedback submissions follow the website’s existing feedback rules.

For privacy questions and sourced corrections, use our feedback page. App-store privacy declarations describe the submitted app version; they do not certify that every website feature has the same data handling.