Privacy

BallotCard is built so that it has nothing to know about you. There are no accounts, no profiles, and no tracking. This page explains the whole arrangement — it is short because there is not much to explain.

Your address

When you enter your address, our server passes it to the US Census Geocoder — a free public government service — which returns the voting districts that contain it. We keep the districts and discard the address. It is never written to our database and never logged.

What stays on your device

Your browser's localStorage remembers your district IDs so that “My ballot” works on your next visit. District IDs are facts about places, not about people — the same IDs are shared by everyone in your district. Clearing your browser storage removes them, and nothing breaks; you can simply enter your address again.

No accounts, no analytics

There is nothing to sign up for and no analytics that identify you. We use error monitoring (Sentry) in production to catch bugs; it is configured to scrub addresses and personal information, and we verify that scrubbing in our automated tests.

Verify it yourself

BallotCard is open source. The code that does everything described above is public, so these claims can be checked rather than taken on faith.