Privacy

The website

• One cookie, and only if you buy something. It is set when a payment completes and it holds a signed receipt: which plan you bought and when it expires. That is the entire contents — no identifier for you, nothing about which districts you have read, and no way for us to work either out from it. It is read for exactly one purpose, which is deciding whether to unlock a page, and it goes away when it expires or when you clear it. Until you pay, the site sets nothing at all and there is nothing to consent to.
• No analytics or advertising scripts. The pages load no third-party JavaScript at all. The only script on the site is the district autocomplete, which asks our own server.
• Your searches reach our server as ordinary requests, the same way the page you are reading did. We do not attach them to you and we do not store them.
• Your email address, only if you type it in. The one form on this site asks to be told when something changes at a district you are watching. It stores the address, which districts prompted it, and the date. It is used for that. It is not sold, not shared, and not put on a newsletter.

If you pay

Payment is taken by Stripe, and your card number never reaches this site — the checkout page is Stripe's, on Stripe's domain. What comes back to us is a customer identifier and the fact that a payment succeeded. We store that so a refund or a renewal has something to attach to, and so the same purchase unlocks the website and the iPhone app without you buying twice. We do not receive your card details and could not store them if we wanted to.

The iPhone app

• No account and no sign-in. The app has no identifier for you, so there is nothing for anything else here to be linked to.
• Saved and recently viewed districts never leave the phone. They are stored in the app's own settings on the device. We cannot read them, they are not synced, and deleting the app deletes them.
• Location, only when you ask. The app asks for permission at the moment you tap "districts near me" and never at launch. Because the 19,000 district centre points live in our database and not on your phone, answering the question means sending a position — so the app rounds it to three decimal places, about 110 metres, before it does. That is far coarser than the fix your phone has and still far finer than any district boundary. We do not store it, we do not link it to anything, and there is no second use for it.
• No SDKs. The app links no advertising, analytics, attribution or crash reporting library. It talks to our server and to nothing else.

What our host sees

The site and the API run on Cloudflare Workers. Like every web host, Cloudflare records that a request happened — its time, its URL, and the network address it came from. For a "districts near me" request that URL contains the rounded coordinates. Cloudflare keeps these operational logs for at most seven days and then deletes them; we use them to find out why something broke, and they are never joined to anything else on this page. Nothing in that log is copied into our database.

What we never do

• We do not sell or rent anything about you to anyone. There is no version of this product where that changes.
• We do not build a profile of which districts a person looked at. The design is what prevents it: the app has no identifier, and the list of districts you have opened is on your phone rather than on our server.
• We do not knowingly collect anything from children. This is a tool for adults deciding where to live and what to vote on.

Getting your data removed

The only thing we hold that is about a person is an email address you typed into the notify form. Ask and it is deleted — there is nothing else to delete, and no account to close. Everything else on this site is public reference data about school districts, which is not about you.