Privacy

The public Contact form is currently open. Submitting a message sends it to the contact service described below for review. Messages are not published automatically. Please do not include passwords, financial information, or other sensitive details.

Information we collect

When you submit the form, we receive your message, any name or email address you choose to provide, your optional device type (phone, tablet, or desktop) if selected, your three permission choices, and the time and reference of the submission. Device type is added to the message; we do not ask for a device model or identifier. Only the message is required. An email address is required if you ask for return contact or express newsletter interest.

Return contact, newsletter interest, and public-posting permission are separate choices. All start unchecked. We do not automatically subscribe you, publish your message, or send you an automated reply.

Storage and replies

The contact service saves your message and permission choices in a private, encrypted S3 archive with a submission reference. A saved-message confirmation means the archive accepted your message; it does not mean an email was sent or that a reply is coming. Email delivery is not part of this submission service.

Submissions are planned to be retained indefinitely during the initial phase. An owner may review and delete messages through an approved administrative process. S3 Versioning is enabled, so older archive versions must also be considered when handling deletion requests. Please do not include passwords, financial information, or other sensitive details.

Security and technical records

The contact endpoint applies input validation, a honeypot check, and a concurrency limit, but it does not provide distributed per-address rate limiting. The application does not log message text, names, email addresses, or network addresses. AWS and hosting providers may maintain separate technical records under their own policies.

Cookies and tracking

The website does not set visitor cookies or use analytics or advertising trackers. The contact form does not require an account. Unsent messages are not deliberately saved in browser storage; your browser may separately restore form fields.

Civic Search runs in your browser against static index files. The site does not collect or save search history, send search text to a search provider, or use search tracking. Search text and filters appear only after the # in the search page's URL, not in page requests. Your browser may retain that URL in its own history. Hosting services can see requests for index files, which may reveal broad search prefixes; do not enter private information.

The site saves your selected state, county, city or place, and any five-digit ZIP code in this browser so the sidebar can remember your choices across pages. The ZIP is checked against a static 2020 Census ZIP Code Tabulation Area crosswalk downloaded with the site; it is not sent to a location service and does not identify your address or voting district. County and place lists also come from Census geography and may not match current local service boundaries. The site does not request GPS or use an IP-location service.

Hosting

Amazon Web Services hosts the website. Hosting services process basic technical information, such as a visitor's IP address and requested pages, to deliver and protect the website.

Your choices

You can use the Contact form to request deletion, ask about your information, or withdraw a permission. Include enough information to identify the original message, but no passwords or identity documents. We may need to confirm the request before acting. Withdrawal does not automatically erase provider backups or records subject to legal retention.

Changes

We will update this notice when the form opens or its data handling changes. Automated assistant access is not part of this contact-form release.