Privacy Policy

We don't collect your data.

Last updated: April 6, 2026

The short version

  • ✓ We never collect your email address, phone number, name, or mailing address.
  • ✓ Opt-out templates are generated in your browser and never sent to our servers.
  • ✓ We use no advertising networks, tracking cookies, or fingerprinting.
  • ✓ We store only anonymous aggregate counts (e.g., total plans generated).
  • ✓ We sell nothing and share nothing.

1. What we collect

Anonymous aggregate counts

When you complete the opt-out plan builder, we increment a counter (e.g., "total plans generated"). This is a single integer. No information about you, your choices, or your device is stored.

Standard server access logs

Our hosting provider (Vercel) automatically records standard web server logs, which include IP addresses, browser user agents, pages visited, and timestamps. We do not access, analyze, or retain these logs beyond what Vercel stores by default (typically 30 days). We do not cross-reference logs with any user data.

Analytics (when enabled)

We use or plan to use Plausible Analytics, a privacy-respecting analytics service that uses no cookies, collects no personal identifiers, and is GDPR-compliant by design. Plausible records page views, referrer sources, country-level location, and device type — never individual user data.

2. What we explicitly do not collect

  • Email addresses
  • Phone numbers
  • Names or mailing addresses
  • The contents of any opt-out email template you generate — these are created in your browser and go directly to the organization you send them to, never through our servers
  • Your questionnaire answers from the plan builder — these are processed entirely in your browser
  • Cookies (we set none)
  • Any form of device fingerprinting
  • Payment information (the site is free)

3. Third-party services

Vercel (hosting)

Our infrastructure provider. Vercel processes standard HTTP requests and maintains server access logs. See Vercel's Privacy Policy.

Plausible Analytics (analytics)

Cookie-free, GDPR-compliant analytics. No personal data collected. See Plausible's Privacy Policy.

Upstash Redis (anonymous counters, Phase 2)

Used to store aggregate impact counters (total plans generated). Only integer counts are stored — no personal data. See Upstash's Privacy Policy.

We do not use advertising networks, social media pixels, or any analytics services beyond those listed above.

4. Links to external sites

This site links to third-party opt-out pages (ActBlue, WinRed, DNC, RNC, etc.). Once you click through to those sites, their privacy policies govern. We have no control over and no relationship with those organizations' data practices.

5. Children

This site is not directed at children under 13. We do not knowingly collect any information from children.

6. Changes to this policy

If we materially change what data we collect, we will update this page and revise the "Last updated" date at the top. We will not collect personal information without updating this policy first.

7. Contact

Questions about this policy? Email privacy@enough.vote.