Legal

Privacy Policy

This policy describes the system as it is actually built: what is collected, where it lives, who can reach it, and how you can remove yourself without asking anyone's permission.

Effective August 13, 2026 · Last updated August 13, 2026

The short version

We collect your email address so we can verify that a real person signed. A name and state are optional. We never collect your ballot, your party, or your payment information. We never sell or share your personal information. Only aggregate totals are published — your name and email are not. You can withdraw yourself at any time from Manage or withdraw your pledge.

Who we are

One Term Only (“One Term Only,” “we,” “us”) operates this website and the voluntary voter pledge described on it. We are the party responsible for the personal information described in this policy. Written notices may be sent to 1309 Coffeen Avenue, Suite 1200, Sheridan, WY 82801, and privacy requests may be sent to info@onetermonly.org.

This is not a government website, a government petition, a ballot initiative, or a voter-registration service. See our Disclaimer for the full statement of what this project is not.

What we collect

  • Email address. Required, to confirm that a real person controls the address and to send the records and links tied to your pledge.
  • Optional first name or display alias, and state. Used for aggregate progress reporting and, only if you choose it, public display.
  • Optional ZIP code. Used to report progress by geography and to show you your own elected representatives.
  • Pledge record details. The pledge version you signed, the timestamp, verification status, and your separate consent choices with their history.
  • Messages you send us. If you use the contact form, the message and the address you supply so we can reply.
  • Limited technical data. Request metadata needed for abuse prevention, rate limiting, and security logging.

What we never collect

  • Your ballot, or any information about how you voted. It is not knowable to us.
  • Party registration or political affiliation.
  • Payment information. This site does not process payments.
  • Social security numbers or government identifiers.
  • Biometric data, precise device location, or advertising identifiers.

Why we use it

  • To verify that each pledge represents one real, consenting person.
  • To publish an accurate, non-inflated count.
  • To let you manage, correct, or withdraw your own record.
  • To send transactional messages about your pledge, and — only with your separate, revocable consent — movement updates.
  • To prevent abuse, fraud, and automated submission.
  • To meet legal obligations and respond to lawful requests.

Cookies, measurement, and your control

This site does not use advertising cookies, cross-site tracking, third-party analytics profiling, or fingerprinting. Storage used by the site is limited to what is necessary for the page to function, such as remembering interface state during your visit.

We do count visits, using our own software running on our own servers. It records the page, the referring source, the approximate region derived from the request, and the device type — never your IP address in raw form, never a cross-site identifier, and never anything sold or shared with an advertising network. The anonymous key that links your page views into a single visit is stored only on your device and is not readable by any other site. Measurement records are purged on a rolling schedule.

When we run ads, the link in the ad passes through our own site before it reaches the page, and the ad platform may load a small counting image from us when the ad is shown. This lets us check the advertising numbers ourselves instead of taking the platform's word for them. What we record is the campaign, ad group and ad, the click identifier the platform supplies, and a random reference for the click. No name, email, phone number, or raw address is stored by this, and nothing personal about you is sent back to the ad platform through it. These records are deleted on the same rolling schedule as the rest of our measurement.

If your browser sends a Global Privacy Control or Do Not Track signal, we switch measurement off before anything is recorded. You can also turn it off here:

Measurement on this device

We count visits with our own software on our own servers, and we use a Reddit pixel only to measure pledge completions. No raw personal data leaves your browser: emails and phone numbers are hashed before they are sent. Turn this off and this browser sends nothing at all. Your choice is stored on this device, so it applies here and travels no further.

Service providers

We use a small number of vendors to run the site. They process personal information only on our instructions and only for the function listed.

  • Application hosting and database. Stores pledge records and site content in the United States.
  • Email delivery. Sends verification, management, and — where you have consented — update emails, and reports delivery outcomes such as bounces and complaints.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We may disclose information if required by law, to protect rights and safety, or in connection with a transfer of the project’s operations, in which case this policy or its successor continues to govern.

What is public

Aggregate totals only, and geographic totals only above a privacy threshold that prevents identifying individuals in small areas. Your email address is never published. Your name appears publicly only if you affirmatively choose public display, and you can remove it yourself at any time. Sharing links do not reveal who created them.

Email practices

Signing the pledge does not subscribe you to marketing email. Transactional messages — verification, your management link, and confirmation of an action you took — are separate from movement updates. Movement updates require a distinct, recorded, revocable consent, carry a one-click unsubscribe, and include our postal address. Addresses that hard-bounce or report a complaint are suppressed automatically and are not emailed again.

Movement updates — and only movement updates — may be measured. Links in them can be rewritten to pass through a redirect on our own domain so we can count which links were useful; the redirect records the click and sends you straight on, and no third party is involved. Our email provider may also report that a message was opened, which is an approximation rather than a fact: mail apps that block remote images never report an open, and privacy proxies report opens you never made. Transactional messages are never measured. Measurement records are kept only as long as they are useful for reporting and are then purged. If you would rather not be measured at all, unsubscribing from movement updates ends it.

One Term Only · 1309 Coffeen Avenue, Suite 1200, Sheridan, WY 82801

How it is protected

Pledge records and the personal information attached to them are stored in separate, access-restricted tables with row-level security, so a public read path cannot reach contact details. Submission is handled server-side. Verification and management tokens are stored hashed, are single-use, and expire. Administrative views mask personal information by default, exports are permission-controlled, and privileged actions are written to an audit log.

No system is perfectly secure, and we do not claim any certification or third-party audit. If you believe you have found a vulnerability, please write to info@onetermonly.org before disclosing it publicly.

Retention

  • Unverified pledges expire and are purged after a short window, so an unconfirmed address does not sit in the system indefinitely.
  • Verified pledges are kept while the movement operates, because the count depends on them, or until you withdraw or request deletion.
  • Withdrawn records are reduced to the minimum needed to prevent re-counting and to honor suppression.
  • Suppression entries (unsubscribes, bounces, complaints) are kept for as long as needed to keep honoring them.
  • Contact messages and audit logs are kept for a limited operational period and then reduced or deleted.

Your rights and how to use them

You may request access to your record, correct it, withdraw your pledge, revoke consent, or request deletion. Withdrawal removes you from the public count.

You do not need to email staff for most of this. Use Manage or withdraw your pledge to have a private link sent to the address on the record, where you can withdraw, remove your name from public display, or change your email preferences yourself. The link goes only to that address and expires after a short window.

For anything the self-service tool does not cover, write to info@onetermonly.org. We aim to acknowledge requests promptly and to resolve them within 45 days, and we will tell you if we need longer. To protect you, we verify that a request comes from the address on the record before acting on it. An authorized agent may submit a request on your behalf with written permission that we can verify.

State privacy rights

Residents of California and of other states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, and Texas — have rights to know what personal information is held, to obtain a copy, to correct it, to delete it, and to opt out of sale, sharing, targeted advertising, and profiling with legal effects.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising or for profiling that produces legal effects. There is nothing here to opt out of, but you may still exercise every other right above. We honor recognized browser opt-out signals such as Global Privacy Control where they apply. We will never deny service, charge a different price, or provide a lesser experience because you exercised a privacy right. If we deny a request, you may ask us to reconsider by replying to our decision, and you may contact your state attorney general.

Children’s privacy

This site is intended for people old enough to vote or to be preparing to. It is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has submitted information, write to info@onetermonly.org and we will delete it.

International visitors

This is a United States civic project, and information is processed and stored in the United States. If you visit from outside the United States, you are sending your information to the United States, where privacy laws differ from those of your country.

Pages such as Media and Evidence link to outside articles and videos. Those sites have their own privacy practices, which we do not control. Embedded video is loaded in privacy-enhanced mode where the provider offers it.

Changes to this policy

If this policy changes, we will update the effective date at the top of the page and, for material changes affecting people with an active pledge, notify signers by email. Continued use of the site after an update means the updated policy applies.

Contact

Privacy questions and requests: info@onetermonly.org. General questions can also go through the contact form. Postal notices: One Term Only · 1309 Coffeen Avenue, Suite 1200, Sheridan, WY 82801.

Last updated August 13, 2026.

Related: Terms of Use · Disclaimer · Accessibility