The honest data map.

For many of us, privacy is safety. So here is exactly how information moves through this platform. It shows what we keep. It shows what we refuse to keep. And research only ever happens with your permission.

A companion to our Privacy Policy, shaped around the flow of data instead of the legal clauses. Last verified: July 1, 2026.

1 · What we collect

Only what a tool needs to do its job. We keep your name and single-member district when you build a card or a plan. We keep your email if you make an account (for sign-in and to reach you). We keep your saved progress and milestones. We keep the words you choose to write (your "why" and notes). We keep signature counts you log. That's the inventory.

2 · What we never collect

  • Your home address: an address you type is turned into a district and then dropped. It is never stored on our servers.
  • Your check-in feelings: the wellbeing questions in the quiz are never stored or sent.
  • Your safety-kit checklist: which items you check and which people-search opt-outs you use stay on your device only.
  • Your ballot name: if you save it for the petition forms it stays on your device and never on our servers.
  • Your January letter: sealed for you. It is never read and never used in research.
  • Your anchor and reflections: the words you write about your life stay yours; only the count of weeks kept feeds research.
  • Donor identities: when you sync donations from GoodChange we record donation amounts, never donors. Names and emails stay in GoodChange. Only the totals reach us.
  • Open/click tracking: our emails carry no tracking pixels, ever.
  • Third-party ad tech, and we never sell your data. Full stop.

One thing we do use: Google Analytics tells us how the site is used (which pages help, where people get stuck) so we can improve it. It sets cookies and sends usage data to Google, with IP anonymization on, and it's disabled entirely when your browser sends Do Not Track or Global Privacy Control. It never touches your words. It never touches your address or check-ins or anything with your name on it. Details are in the privacy policy.

3 · How research works

Research is off unless you turn it on (the toggle in Your profile). When it's on, we may include your journey in anonymized aggregates: counts and milestones only. That never includes your words or your address or anything with your name on it. Any group smaller than 5 people is suppressed and never shown. An example of the kind of thing we'd learn: "of consenting candidates who reached 25 signatures, X% went on to file." That's the whole point: to learn what actually helps queer neighbors win, and publish it.

Two different things kept separate. Operational counts (how many people used a tool; no names; always on) versus research aggregates (journeys joined together; only for people who opted in).

What your consented data builds. If you turn research on, your dashboard shows you a monthly receipt: what your anonymous data helped build this month and where it shows up. That receipt covers the "2–8 flexible hours a week" figure. It covers the citywide signature pulse. It covers the completion patterns that improve the curriculum. The loop is simple. You consent. You see the collective value it creates. And nothing personal is ever shown. No number is published until at least five people share it.

The outreach log (if you opt in). The outreach log holds the conversations and texts and calls you track. It lives on your device. If you opt in, only the counts sync to the same k-anonymized aggregate. The sync never carries your notes or names or per-person logs. That lets us report things like "N outreach conversations logged citywide this month" for impact. It is aggregate and opt-in and withdrawable (turn research off and the sync stops). And it is never sold.

4 · Who sees what

  • You: everything about you at any time at Manage your data.
  • The program: every portal member shares their name and email and district (SMD) with Capital Stonewall Democrats. This is required for a member account so we know who's in the program. It's separate from research consent below.
  • Organizers: the support requests you send them, and moderation queues for anything you make public.
  • The public: only what you explicitly set public, plus the suppressed (k≥5) aggregates above.

5 · Your controls

See or export or delete your data. Flip research consent on or off at any time. Pause nudges. Run quieter by keeping fields private. You are never locked in. Turning research off stops future use immediately.

6 · Why we built this

We're building a bench of queer and trans neighbors ready to lead, and publishing what works so the next person has it easier. Consent-first is how that dataset stays ethical and trustworthy. Questions? [email protected].

7 · The Voter Contact Tool

Candidates in contested races can use an optional canvassing tool that works off the public DC voter file. It has its own Tool Privacy Policy because it handles public voter-registration data. The key point is simple: that data is the candidate's, and the program never reads or uses it.