How We Handle Your Personal Information
This policy sets out what data we collect when you visit board-of-elections.org/, why, who we share it with, how long we keep it, and the rights you have under California, Virginia, Texas, Florida, Colorado, Connecticut, and other state privacy laws. Read it alongside our Cookie Policy and Disclaimer.
What’s on this page
1. Who We Are
board-of-elections.org/ is an independent, nonpartisan informational and educational directory of U.S. state election authorities, voter registration portals, polling place tools, voter ID rules, and absentee/mail-in voting frameworks. It is operated as a privately-owned editorial publication. We are not affiliated with the Election Assistance Commission (EAC), the Federal Election Commission (FEC), the U.S. Department of Justice, the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Voting Assistance Program (FVAP), the National Association of Secretaries of State (NASS), the National Association of State Election Directors (NASED), the Electronic Registration Information Center (ERIC), or any state or local election authority.
For all privacy and data inquiries, contact: info@board-of-elections.org
2. Voter Registration Data — We Do Not Process It
State voter registration databases are operated by state and local election authorities under state law and federal frameworks (HAVA, NVRA). In many states, voter registration records are public information that can be obtained through the state election authority’s records request process — but with state-specific use restrictions (most states prohibit commercial use, and many prohibit use for non-election purposes). We do not request, host, sell, or analyse voter registration data. If you want to update your voter registration, request your registration record, or opt out of any state-level public-records release, you must contact your state election authority directly — every state page on the site lists the verified contact.
If you contact us about a privacy concern related to your voter registration, we will route you to the right state authority — we cannot adjudicate or take action on voter registration records.
3. FCRA Non-CRA Position
The Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.) regulates "consumer reports" used for "permissible purposes" — primarily employment, credit, insurance, and tenant screening. board-of-elections.org/ does not assemble, evaluate, or sell consumer reports. We do not provide "background checks." We do not provide voter list extracts, voter list matching, or any FCRA-regulated product. Information published on our site is general informational content drawn from public records and authoritative public sources — it is not a "consumer report" in the FCRA sense.
4. HIPAA — Not a Covered Entity
The HIPAA Privacy Rule (45 C.F.R. Parts 160 and 164) and Security Rule apply to "covered entities" — health plans, healthcare clearinghouses, and most healthcare providers — and to their "business associates." board-of-elections.org/ is none of these. We do not collect, store, transmit, or maintain Protected Health Information (PHI). Voter registration sometimes captures disability accommodations or temporary medical absentee circumstances under state law; that is information held by the state election authority, not by us.
5. What Information We Collect
We collect only what’s necessary to operate the site:
| Category | Examples | How collected |
|---|---|---|
| Server logs | IP address (truncated), user-agent, request path, response code, timestamp | Automatic, every request |
| Analytics | Page views, time on page, click paths, referrer (aggregated) | Google Analytics 4 if you consent |
| Cookie preferences | Your accept/reject choice for analytics and advertising | Cookie banner |
| Functional preferences | Selected state, font size, accessibility preferences | Local browser storage |
| Email content | Anything you send to info@board-of-elections.org | Direct email from you |
| Advertising data | Frequency capping, ad measurement | Google AdSense if you consent |
We do not collect: your name, address, phone number, date of birth, Social Security Number, voter registration number, party affiliation, voting history, or any sensitive political information unless you choose to email it. We do not require account creation. We do not run client-side fingerprinting beyond what is necessary for security and bot mitigation through Cloudflare.
6. Why We Collect It
- To operate the site — load pages, prevent fraud, mitigate bots and abuse
- To remember your choices — cookie consent, accessibility preferences, selected state
- To understand what’s useful — aggregate analytics on which state pages, registration walkthroughs, and polling-place guides are read most
- To support display advertising — frequency capping and basic measurement, with personalised advertising only where you have consented
- To respond to your messages — when you email us
7. Legal Bases & State-Law Framework
The legal foundation for processing depends on your jurisdiction. For visitors in states with comprehensive privacy laws (CCPA/CPRA in California, VCDPA in Virginia, CPA in Colorado, CTDPA in Connecticut, UCPA in Utah, TDPSA in Texas, FDBR in Florida, OCPA in Oregon, and others), processing is based on (a) the necessity of providing the requested service, (b) our legitimate interest in operating the site safely and improving it, and (c) your consent for analytics and advertising cookies.
9. How Long We Keep Information
| Data type | Retention |
|---|---|
| Server logs (security) | 30 days, then aggregated |
| Analytics data | 14 months (default GA4 retention) |
| Cookie consent record | 12 months from when set |
| Email correspondence | 3 years from last contact, then deleted |
| Functional preferences | Until you clear browser data |
10. Your Rights Under U.S. State Privacy Laws
Comprehensive privacy laws across U.S. states give residents specific rights. The exact rights depend on your state of residence — the table below summarises the main rights under the most-cited state laws.
| State / Law | Citation | Key rights |
|---|---|---|
| California (CCPA / CPRA) | Cal. Civ. Code § 1798.100 et seq. | Know, delete, correct, opt-out of sale/sharing, limit use of sensitive information, non-discrimination |
| Virginia (VCDPA) | Va. Code § 59.1-575 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Colorado (CPA) | C.R.S. § 6-1-1301 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Connecticut (CTDPA) | Conn. Gen. Stat. § 42-515 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Utah (UCPA) | Utah Code § 13-61 | Access, delete, portability, opt-out of targeted advertising / sale |
| Texas (TDPSA) | Tex. Bus. & Com. Code Ch. 541 | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Florida (FDBR) | Fla. Stat. § 501.701 et seq. | Access, delete, correct, portability, opt-out of targeted advertising / sale |
| Oregon (OCPA) | ORS Ch. 646A | Access, delete, correct, portability, opt-out of targeted advertising / sale / profiling |
| Other states | Various | Iowa, Tennessee, Indiana, Montana, New Jersey, Delaware, New Hampshire, Kentucky, Maryland, Minnesota, Nebraska, Rhode Island and others have or are implementing comparable laws |
To exercise any right, email info@board-of-elections.org with subject line “Privacy rights request” and your state of residence. We respond within 45 days (extendable to 90 days where allowed for complex requests). We may need to verify your identity to protect against fraudulent requests.
11. Children
board-of-elections.org/ is not directed to children under 13. The federal Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506) imposes specific obligations on operators that knowingly collect personal information from children under 13. We do not knowingly collect personal information from children under 13. The site is, however, sometimes used by older students learning about U.S. elections — that use is not directed at any individual child and does not collect personal data.
12. Security
We use industry-standard technical and organisational measures to protect information:
- HTTPS/TLS encryption for all site traffic
- Cloudflare for DDoS and bot mitigation
- Access controls — only authorised editorial staff can access logs and email
- Periodic security review of hosting and email infrastructure
- No on-site collection of payment card information, Social Security Numbers, voter registration data, or party affiliation
No internet transmission or storage system is perfectly secure. If we discover a breach affecting personal information, we will notify affected users in accordance with applicable state breach-notification laws.
13. International Visitors
Our site is operated from and intended for visitors in the United States. If you visit from outside the U.S., your information will be transferred to and processed in the U.S. We do not market to or knowingly collect data from EU/EEA, UK, or other non-U.S. visitors as a primary audience, but we do honour Global Privacy Control (GPC) signals and reasonable rights requests from visitors regardless of location.
14. Changes to This Policy
We update this policy when our practices change or when applicable laws change. Substantive changes are flagged at the top of the page with a new “Last reviewed” date and, for material changes, a notice on the site for 30 days.
15. Contact
For any privacy or data-rights question, email info@board-of-elections.org with subject line “Privacy” or “Privacy rights request” — see Contact Us for the full list of channels.
Have a Privacy Question or Rights Request?
Email us with subject line “Privacy rights request.” We respond within 45 days as required by California, Virginia, Colorado, Connecticut, Texas, Florida, Oregon, and other state privacy laws.
📧 info@board-of-elections.org