DRAFT · LEGAL REVIEW REQUIRED
Privacy policy: draft
Working draft, not finalized legal advice or a compliance guarantee. Operator identity and contact details must be supplied before public launch.
Minimum collection
We use a random signed HttpOnly browser cookie, expiring after 90 days, for support deduplication and first-party operational measurement. A browser identifier is not a verified person. We do not infer political affiliation, ideology, voting behavior or candidate preference, create political-interest profiles, use device fingerprinting, or load third-party analytics.
Operational records
Qualified events and their random browser identifiers are retained to preserve lifetime totals and auditable business metrics. Attribution tags and invalid events expire after 90 days when maintenance runs. Directory-only entries have no listing-specific engagement measurement. The service stores sanitized referrer domains, not full referring URLs; avoid personal information in campaign tags. IP addresses are HMAC-throttled, not stored raw by this application. The hosting operator must configure access-log retention separately.
Private contacts
Submission, claim and sponsor contact emails are encrypted at rest and available only to the administrator. Financial records and authorization evidence require an owner-approved retention policy. Do not submit sensitive personal information in free-text fields.
Your choices
Browsing does not require registration. Clearing site data creates a new browser identifier and affects measurement. Before public launch, the operator must supply their legal identity, contact address, privacy-request channel, final retention schedule and any required consent controls. This draft is not a finalized privacy notice.