Privacy Policy

What we collect

• Location (ZIP / district). To match you to your two U.S. Senators we use your ZIP code or congressional district. Your selection is stored in a first-party cookie (vrp_district, ~365 days) so you don't have to re-enter it. We do not collect precise GPS location.
• Phone number (identity verification). Creating a verified account uses a one-time code sent by SMS to your phone. We verify the number to keep one person to one voice and prevent automated/duplicate (sybil) participation.
• Email (optional). Only if you opt in to the weekly digest. Every email includes one-tap unsubscribe.
• Your positions. The votes and opinions you record on bills and senators, tied to your account.
• On-chain participation keys. Verified heartbeat votes are signed and anchored to the public Solana ledger. A wallet keypair is generated for you; the secret seed is encrypted at rest (AES-GCM) and used only server-side to sign your participation. It is never exposed to your browser or to third parties.
• Basic usage analytics. We use Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you across sites. We do not run Google Analytics, Meta Pixel, or session-recording tools on this platform.

How we use it

• Connect you to your senators and show records relevant to you.
• Verify identity so each verified voice is a real, unique person.
• Record and (with your consent) anchor your positions on the public ledger.
• Send the weekly digest, only if you opted in.
• Keep the platform secure and detect abuse.

We do not sell your personal data, and we do not use it for political donation solicitation or third-party advertising.

Service providers

We share data only with the processors needed to run the service, under their respective terms:

• Supabase — database and authentication.
• Cloudflare — hosting, content delivery, media storage, and cookieless analytics.
• Resend — transactional and digest email.
• A third-party SMS provider — delivery of one-time verification codes.
• Geocodio — converting your ZIP into your congressional district.
• Anthropic — AI assistance for content processing (e.g. categorization and moderation). Inputs are not used to train third-party models.
• The Solana network — anchored heartbeat signatures are written to a public ledger. On-chain records are, by design, public and permanent; they do not contain your name, phone, or email.

Cookies

We use only functional cookies: vrp_district (remembers your state/district) and a session cookie for signed-in accounts. Our analytics are cookieless. We do not use advertising or cross-site tracking cookies.

Retention

We keep account data while your account is active. You can delete your account at any time from your account settings, which removes your personal data from our systems. Note that signatures already anchored to the public Solana ledger cannot be deleted from the blockchain; they remain pseudonymous and contain no contact details.

Your choices and rights

• Access & correction. Review your data in your account, or request a correction.
• Deletion. Delete your account and personal data via account settings.
• Email opt-out. One-tap unsubscribe in every email, or manage it from your account.

Depending on where you live, you may have additional rights (such as under the GDPR or CCPA). Contact us to exercise them.

Children

VotersRight is intended for adults of voting age and is not directed to children under 13. We do not knowingly collect data from children.

Security

Data is encrypted in transit, and sensitive secrets (such as on-chain key seeds) are encrypted at rest. No system is perfectly secure, but we design for least-data and defense-in-depth.

Changes

We'll post any updates here and revise the "last updated" date above. Material changes will be communicated through the platform.

Contact

Questions or requests: privacy@votersright.org.