Privacy

The Mayoral Record is an independent civic-transparency project. We collect as little data as possible.

What we collect

Anonymous browser fingerprint hash. When you submit a reader vote, the site generates a random 32-character identifier in your browser's local storage, hashes it with SHA-256, and uses the hash to prevent the same browser from voting twice on the same record. The original fingerprint never leaves your device. The hash is one-way and is not linked to any other data about you.
Aggregate page-view counts via Cloudflare Web Analytics. This is cookieless and does not track you across sites.
Cloudflare Turnstile challenge tokens when you submit a vote or a chat query. Turnstile is a no-CAPTCHA bot-detection challenge.

No accounts. You do not sign up.
No email address. No phone. No name.
No IP-address logging beyond what Cloudflare and Vercel keep for security and abuse prevention.
No third-party advertising trackers. No retargeting. No cross-site tracking.

Cloudflare (analytics, Turnstile bot detection): subject to Cloudflare's privacy policy.
Upstash (Redis storage): subject to Upstash's privacy policy.
Vercel (hosting): subject to Vercel's privacy policy.
Pol.is (deliberation embed): subject to Pol.is's privacy policy. We do not control Pol.is's data practices.
Anthropic (Claude API for content extraction, synthesis, and chat answers): we send public Instagram content and reader queries to Anthropic for processing. No reader-identifying data is included.

Aggregate vote counters in Redis are retained indefinitely.
Per-fingerprint dedup keys auto-expire after 365 days.
Reader query logs (used to surface anonymized recent-questions) are retained for 30 days. Queries are not linked to fingerprint hashes or IP addresses.
Server logs (Vercel, Cloudflare) retain per their providers' policies; we do not retain copies.

This is a plain-English disclosure. It is not legal advice. If you have a specific privacy concern, please contact us. Last updated: 2026-05-04.