Queering ANCs

How your data works

The honest data map.

A companion to our Privacy Policy, shaped around the flow of data instead of the legal clauses. Last verified: July 1, 2026.

For many of us, privacy is safety. So here is exactly how information moves through this platform — what we keep, what we refuse to keep, and how research only ever happens with your permission.

1 · What we collect

Only what a tool needs to do its job: your name and single-member district when you build a card or a plan; your email if you make an account (for sign-in and to reach you); your saved progress, milestones, and the words you choose to write (your "why", notes). Signature counts you log. That's the inventory.

2 · What we never collect

  • Your home address — an address you type is turned into a district and then dropped. It is never stored on our servers.
  • Your check-in feelings — the wellbeing questions in the quiz are never stored or sent.
  • Your safety-kit checklist — which items you check, and which people-search opt-outs you use, stay on your device only.
  • Your ballot name — if you save it for the petition forms, it stays on your device, never on our servers.
  • Your January letter — sealed for you, never read, never used in research.
  • Your anchor and reflections — the words you write about your life stay yours; only the count of weeks kept feeds research.
  • Donor identities — when you sync donations from GoodChange, we record donation amounts, never donors. Names and emails stay in GoodChange; only the totals reach us.
  • Open/click tracking — our emails carry no tracking pixels, ever.
  • Third-party ad tech, and we never sell your data. Full stop.

One thing we do use: Google Analytics tells us how the site is used (which pages help, where people get stuck) so we can improve it. It sets cookies and sends usage data to Google, with IP anonymization on — and it's disabled entirely when your browser sends Do Not Track or Global Privacy Control. It never touches your words, your address, your check-ins, or anything with your name on it. Details are in the privacy policy.

3 · How research works

Research is off unless you turn it on (the toggle in Your profile). When it's on, we may include your journey in anonymized aggregates — counts and milestones only, never your words, your address, or anything with your name on it. Any group smaller than 5 people is suppressed and never shown. An example of the kind of thing we'd learn: "of consenting candidates who reached 25 signatures, X% went on to file." That's the whole point — to learn what actually helps queer neighbors win, and publish it.

Two different things, kept separate: operational counts (how many people used a tool — no names, always on) versus research aggregates (journeys joined together — only for people who opted in).

What your consented data builds. If you turn research on, your dashboard shows you a monthly receipt — what your anonymous data helped build this month, and where it shows up (the "2–8 flexible hours a week" figure, the citywide signature pulse, the completion patterns that improve the curriculum). The loop is simple: you consent, you see the collective value it creates, and nothing personal is ever shown — no number is published until at least five people share it.

The outreach log (if you opt in). The outreach log — the conversations, texts, and calls you track — lives on your device. If you opt in, only the counts (never your notes, never names, never per-person logs) sync to the same k-anonymized aggregate, so we can report things like "N outreach conversations logged citywide this month" for impact. It is aggregate, opt-in, withdrawable (turn research off and the sync stops), and never sold.

4 · Who sees what

  • You — everything about you, any time, at Manage your data.
  • Organizers — the support requests you send them, and moderation queues for anything you make public.
  • The public — only what you explicitly set public, plus the suppressed (k≥5) aggregates above.

5 · Your controls

See, export, or delete your data; flip research consent on or off at any time; pause nudges; run quieter by keeping fields private. You are never locked in, and turning research off stops future use immediately.

6 · Why we built it this way

We're building a bench of queer and trans neighbors ready to lead — and publishing what works so the next person has it easier. Consent-first is how that dataset stays ethical and trustworthy. Questions? [email protected].