Votenoted Privacy Policy

Effective date: October 13, 2026

Your privacy is a big deal to us. In this policy, we say what data we collect and why, how we handle it, and what rights you have. We promise that we never sell your data.

Mil Villas LLC, a Florida limited liability company ("we", "us"), runs Votenoted. This policy applies to everyone who uses Votenoted. If you are a California resident or live in another state with a privacy law, the rights in this policy are the same for you.

1. What we collect and why

Our guiding principle is to collect only what we need. This is what that means in practice.

Without an account. When you follow a person or a place, we put a random ID in a cookie named pg_viewer in your browser. The cookie stays for up to 400 days. We keep that ID and the people and places that you follow. We use it to show you your follows. If you send an error report, we keep the report.

With an account. Our sign-in provider, Clerk, keeps your email address and sign-in details. We keep a link between your account and your data. We keep your accuracy checks, your notes, your ratings, your reports, and your choices about email alerts. If you turn on email alerts, we keep a copy of your email address.

Email alerts. We send alerts only if you ask for them. Each email has an unsubscribe link and our mailing address. Resend sends the emails for us. Clerk can send you sign-in codes and security messages.

IP addresses. Our database does not store your IP address. It stores only a salted hash of it (a scrambled code). We delete these hashes after 90 days. We use them to stop abuse and to stop one person from acting as many people.

Server logs. Our hosting provider, Vercel, logs each request to the site, and these logs can include your IP address. Our sign-in provider can also log IP addresses for security.

Address lookups. When you look up your officials by street address, we send the address to government geocoding services. We do not save the address in our database. The address is in the web address of the request, so our hosting logs can hold it.

Voluntary correspondence. If you write to us, we keep your message and your email address so that we can answer you.

Tips. If you leave a tip, Stripe processes it. Stripe receives your payment details and the email that you enter. Votenoted does not see or store card numbers. We see the amount, the date, and your email in Stripe, for receipts and records. We never show supporter names.

Cookies and local storage. A cookie is a small piece of text that your browser stores. We use only the cookies and local storage that the service needs: the pg_viewer cookie, the cookies that Clerk sets to keep you signed in, and a few notes in your browser that remember if you closed a tip or a sign-in prompt, and how many times you visited, for an install tip. We do not use ad cookies or tracking cookies. If you block cookies, you can still read the feed.

We do not collect payment details, your contacts, or your precise location. Your public notes do not show your name or email address.

2. How we use data

• To run the features that you use, such as follows, checks, notes, and alerts.
• To score notes and to confirm cards.
• To stop spam and abuse.
• To send the email alerts that you ask for.
• To keep the service safe, fix problems, and obey the law.

3. Who processes data for us

To provide the service. We use outside providers to run Votenoted. They process data only for us:

Some images, such as photos of officials, load from other public sites. Those sites can see your IP address.

Who looks at your data. People at Mil Villas LLC look at your account data only for limited reasons: to fix an error that stops an automated process, to help with a request that you make, to investigate abuse, and to obey the law.

To investigate abuse. If we find that someone uses Votenoted against our Terms of Service, we can look at their account data and act. This can include a report to the authorities when the law calls for it.

Legal requests. Mil Villas LLC is a U.S. company, and our data is in the United States. We share data with a government only when a valid legal order forces us to, or in an emergency. We try to tell you first, unless the law forbids it.

Sale of the business. If we sell or merge the business, we will tell you before your data comes under a different privacy policy.

4. No sale and no ads

We do not sell your data. We do not share it for ads. Votenoted has no ads and no ad trackers.

5. Your rights with respect to your information

We give the same rights to everyone, wherever you live. These rights include:

• Right to know. You can ask what data we have about you and how we use it. This policy describes it.
• Right of access. You can ask us to show you your data, or to give you a copy in a common file format.
• Right to correction. You can ask us to correct your data.
• Right to erasure. You can ask us to delete your data, with some limits in the law. If we delete your data, we close your account.
• Right to restrict or object. You can ask us to stop a use of your data.
• Right to review of automated decisions. Software helps decide which notes show. You can ask a person to look at a decision again.
• Right to complain. You can complain about how we handle your data to your state attorney general or to your data protection authority.
• Right to non-discrimination. We do not treat you differently when you use your rights.

To use a right, write to us (see Contact). The app has no delete-account button. We answer within 45 days. We can ask you to prove that the request is yours. If an agent writes for you, we need your signed consent. If we refuse a request, you can appeal: write to us again and say that you appeal.

6. How we secure your data

We use encrypted connections between our servers and your browser, and we limit access to our data. No system is fully secure.

7. What happens when you close your account

When you ask us to close your account, your content becomes hidden and we delete the account and its data, including your notes, ratings, and checks. Anything that the law requires us to keep, we keep for as long as the law says.

8. Data retention

We delete IP hashes after 90 days. We keep other data until you ask us to delete it, or until we no longer need it. We can keep data that the law requires us to keep, or that we need to settle a dispute.

9. Location of site and data

Votenoted runs in the United States. If you use it from another country, your data goes to the United States. By using Votenoted, you agree to this transfer.

10. Children

Votenoted is not for children under 13. We do not knowingly collect data from them. If you think that a child under 13 gave us data, write to us (see Contact), and we will delete it.

11. Changes and questions

We can change this policy. We post the new version here with a new effective date. For a significant change, we show a notice on the site before it takes effect.

If you have a question or a concern about this policy, your data, or your rights, write to us.

12. Contact

Mil Villas LLC
contact@votenoted.com

Credits

This policy is based on the 37signals (Basecamp) Privacy policy, from the Basecamp open-source policies (https://github.com/basecamp/policies), licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). We changed the text. Basecamp and 37signals do not endorse Votenoted.