Privacy
No account required. Nothing collected.
Most privacy policies explain what a site takes from you. Ours is short because the answer is: nothing — unless you explicitly ask us to keep a copy of your plan, and then it's exactly one small record you can delete anytime.
What we don't do
- No account required — every feature works signed out. Sign-in exists only as an optional backup of your plan (details below).
- No forms that send us data — we never ask your name, address, email, or phone. The polling-place lookup sends your address straight from your browser to Google's Civic Information API; it never touches our servers.
- No analytics scripts, no advertising pixels, no fingerprinting. No cookies either — unless you sign in, which sets exactly one, whose only job is proving to the sync service that you're you.
- No databases of visitors — your wizard answers live in your browser. If you choose to sign in, one small record exists for you (described below), and you can delete it in one click.
- Nothing to sell, share, leak, or subpoena — we can't hand over what we never had.
What stays on your device
To save you retyping, this site remembers a little in your browser's own storage (localStorage) — never on a server: your language, your finished plan choices (state, registration status, how you'll vote), and — only if you tick “Remember my address on this device” — the address you looked up. Untick the box and the address is erased.
A Forget this device action (on the welcome-back card) wipes all of it instantly. Clearing your browser data does the same.
If you sign in (optional)
Signing in with Google does one thing: it backs up that same small plan record so it follows you to another device. We store exactly two things, keyed to your Google account: your email address and your plan (your saved address is included only if you opted in on-device). It lives encrypted at rest on Cloudflare's infrastructure. We never see your password — Google handles sign-in — and we never send you email.
Delete synced data (in the account menu) removes the record immediately and signs you out. Signing out alone keeps the backup; deleting removes it.
How the site actually works
VotePrep is a static website — pre-built pages served from a content delivery network (Cloudflare), which also handles the optional sign-in endpoints. Like any web host, Cloudflare processes standard connection logs (such as IP addresses) to serve and secure the site; that's governed by Cloudflare's privacy policy. We add no tracking of our own on top — none.
Your voting plan is computed in your browser. Calendar files are generated on your device and downloaded directly — they never touch a server. The share button shares a link that encodes only your state and answers (like ?state=tx&method=mail) — no identity.
When you follow a link to your state's registration site, Google's polling-place data, Ballotpedia, or any other external resource, their privacy policies apply from that point.
Changes
If this policy ever changes materially, we'll say so plainly on this page with a dated note. Last updated: July 6, 2026 (added the polling-place lookup, on-device memory, and optional sign-in — and documented exactly what each one does and doesn't store).
Questions
Email [email protected].