Privacy policy
Last updated: October 31, 2026
Count My Opinion USA (“we”, “us”) runs the Count My Opinion USA app and this website. This policy says what we keep about you, why, who else is involved, and how you can see, copy or delete it. We do not sell or share your personal information.
What we keep
| What | Why |
|---|---|
| Your email address | To sign you in, to confirm the address is yours, and to send a password-reset code when you ask for one. |
| Whether you confirmed your email, and the date | So only people who own their email address can answer and be counted. Confirmation codes are stored scrambled (hashed), last 30 minutes, and are deleted when used or replaced. |
| Your password, stored only as a one-way hash | To check your password when you sign in. We cannot read it. |
| Your Google account ID, if you sign in with Google | To sign you in with Google. Google sends us only your email address, your name and your Google account ID. We keep the email address and the Google account ID. We don’t keep the name from Google: we ask you for your legal name instead. If you already have an account with the same Gmail or Google Workspace address, signing in with Google opens that account, removes its old password and signs it out everywhere else. You can set a new password any time with Forgot password. |
| Your legal first and last name | Only to match your voter registration when you verify. |
| Your home address | To place your answers in your state’s results, and to match your voter registration when you verify. |
| Your answers, and your earlier answers when you change one, with their times | To count the results and to show you your own answers. |
| Whether you confirmed you were at home, and the date (only if you use the “I’m home” button) | To show that your phone or computer was once near your home address. Your location itself is never kept; see Your location. |
| Whether you are verified, the verified state, and the date | To count your answers in the verified results. |
| Your voter ID, only as a scrambled code made with a secret key | So one registration can verify only one account. It cannot be turned back into your voter ID and is never shown, not even to you. |
| When your account was created, and your sign-in sessions (kept only as a one-way hash) | To run your account and keep you signed in for up to 30 days. |
What we don’t keep
- When you verify, the app reads the name, birth year, voter ID, registration status and address from your voter-registration result. We check them and then throw them away; only the scrambled voter ID code above is kept.
- When you verify in the web app, our server reads the same things from the result page you upload. The page is read in memory and then thrown away: it is never saved, logged or kept, and nothing else on it is read.
- Your party affiliation and any dates on your registration are never read or sent.
- We never see what you type into the Colorado Secretary of State’s lookup page.
- We do not keep your name, email, address or answers in our server logs.
Results
Results are totals only. They never show who answered what. Every group, down to a whole state, shows its totals from the first answer, so a state where few people have answered shows small numbers. When you change an answer or delete your account, the results change with it.
Until you confirm your email, you can’t answer questions, and answers from unconfirmed accounts are not counted in results.
Who else is involved
We do not sell or share your personal information, and we do not use it for advertising. A few services help us run the app:
- Our hosting provider runs the servers and database that hold the data above.
- Cloudflare runs our domain name (DNS) and carries every connection to this website and the app through its network and a secure tunnel to our server, so your requests and our replies, including your IP address, pass through it on the way. Cloudflare also forwards email sent to our addresses to our mailbox. It does this for us under its own privacy policy.
- Mailgun delivers confirmation and password-reset emails, and the states list confirmation, so it receives your email address and the code (and, for the states list, your state).
- The US Census Bureau runs the free public geocoder we may use for the “I’m home” check. When you press the button, our server sends it your street address, city, state and ZIP code (never your name, email, account or location) to find where the address is on a map. It does this under the US government’s own privacy policy.
- Google confirms who you are if you choose to sign in with Google, under Google’s own privacy policy. Google’s sign-in script loads on the web app’s welcome, sign-up and log-in pages so the Continue with Google button works; it doesn’t load on any other page. Google doesn’t get your answers, address or anything else you keep with us.
- The Colorado Secretary of State runs the voter-registration lookup you use to verify. It is the state’s own page, under the state’s own privacy policy, and it uses a Google “I’m not a robot” check.
We may disclose information if the law requires it, and we will push back on requests that are not lawful.
Website analytics and cookies
On the marketing pages of this website (such as the home, FAQ and download pages), we may count page views with Umami, an open-source analytics tool that we host ourselves. Umami:
- uses no cookies and stores nothing on your device;
- records only aggregate information: which page was viewed, the referring site, and the general device type, browser and operating system, and country;
- does not follow you across other websites, and does not build a profile of you;
- does not store your IP address;
- runs on our own server, so this information is not sent to an analytics company or any other third party.
Umami is never loaded on the app, account, verification or web-app pages, and we never send it your name, email, address, answers or anything else personal. We don’t send it page addresses’ query strings either.
If your browser sends a Global Privacy Control or Do Not Track signal, we don’t load Umami at all. You can also turn it off on our Your privacy choices page. That choice is saved in a small first-party cookie, the only one this website sets, and only if you ask.
The app uses one sign-in cookie to keep you signed in. It is strictly necessary, used only by us, and not used for tracking.
Your location (optional)
The “I’m home” button in Account is optional, and nothing changes if you never use it. The app or your browser reads your location only when you press it, just once, and sends it to our server, which compares it with your saved home address and then throws it away. Your location is never stored or logged, and we never read it in the background. We keep only whether it matched, the date (not the time), and whether you used the app or the web. We refuse a reading from a mock location, and you can try at most 5 times a day. If you change your home address, the confirmation is removed; you can also remove it yourself at any time. A match shows that your phone or computer was near your home address once; it doesn’t prove who you are.
The states list and helpers
If your state isn’t open yet, you can join the states list without an account. We keep only your email address, your state, and whether you said you’re willing to help bring your state on board. We use them only to email you when your state opens and, if you said you’re willing to help, to ask for your help testing it. We don’t add them to any other list, and we don’t use them for marketing. When you join, or send the guided form, we email you a one-time code to confirm the address is yours. We keep only a scrambled (hashed) form of the code. Until you enter it, your sign-up is not counted and nobody on our team sees it; if you don’t confirm within 48 hours, we delete the sign-up and anything sent with it. If you sign up again, we send a new code at most once every 15 minutes.
If you help, the guided form asks only how your state’s official lookup page is laid out: which kinds of fields it asks for and shows, whether it has a robot check, and the web address of its search page (without anything after a “?”). We keep those answers with your email and state. We never ask for, and never want, your name, birth date, address, voter details or screenshots; please don’t send them.
We delete your entry and your answers once we’ve told you your state is open, or 12 months after you join if it hasn’t opened yet, whichever comes first. To be removed sooner, email privacy@countmyopinion.com from the address you used.
Your choices and rights
- See your data: the app’s My data screen shows everything we keep about you.
- Get a copy: email us at privacy@countmyopinion.com from your account’s email address. We send the copy electronically, by email or to the app’s My data screen, and never by postal mail.
- Correct it: change your name and home address in the app or the web app. Changing the name on a verified account makes it unverified until you verify again.
- Delete it: in the app, open Account and choose Delete account, then confirm with your password (the same in the web app). If you sign in only with Google, first set a password with Forgot password (we email you a code), then delete. Your account, answers, answer history, address, verification and sessions are deleted at once, and your answers leave every result. We keep only a record of the account’s random ID and the deletion time, so that if we ever restore a backup we can delete the account again.
Depending on where you live, you may have other rights under state privacy laws. We honor these for everyone. Email privacy@countmyopinion.com to use them; we will not treat you differently for doing so.
Security
All connections use HTTPS. Passwords and sessions are kept only as one-way hashes, the voter ID only as a keyed code, and the keys stay on our server. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it, as the law requires.
How long we keep it
We keep your information while your account exists, and delete it when you delete your account. Database backups are kept for 30 days on a rolling basis, so each backup is deleted 30 days after it is made. A deleted account is therefore gone from our backups within 30 days; if a backup is ever restored before then, the account is deleted again straight away.
The states list and helpers’ answers are kept as described in The states list and helpers, and leave our backups within 30 days of being deleted.
Children
Count My Opinion USA is for adults aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a child has signed up, contact us and we will delete the account.
Changes to this policy
If we change this policy, we will update the date at the top. For important changes, we will tell you in the app before they take effect.
Contact
Questions about privacy? Email privacy@countmyopinion.com.