Privacy
What this site
knows about you.
Most of this site’s readers are students, and some of them are reading about a policy at their own school. The design assumes that being identified could cost them something.
Zero. Names, email addresses and school names are stored by this site.
There are no accounts and no sign-in. The survey, the comments page and the district form have no field for any of the three, and before a comment is submitted it asks you to confirm you have not put one in the box anyway.
What is stored today
Three things, and one of them is yours- What you type into a form
- Your answers, your role, your grade band and your county. Nothing narrower. Free text is stored as text and is never rendered as markup.
- A salted hash, for rate limiting
- Enough to stop one person submitting a thousand times, and not enough to identify anybody. Rotating the salt makes every previously stored hash unlinkable to a new one.
- Your appearance preference, in your own browser
- If you switch between light and dark, that choice is saved locally so the page does not flash the wrong colours next time. It never leaves your device, and clearing your browser data removes it.
There is no advertising, no third-party tracking script and no social media embed. Web fonts are served from this site rather than from a font provider, so loading a page does not tell anyone else that you did, which also means the site keeps working on a school network that blocks external hosts. Like any website, the server that delivers these pages processes the request in order to answer it; we do not build profiles from that and we do not run behavioural analytics.
The commitments
Six, in force nowNo name, no email, no school
Not on the survey, not on a comment, not on a district submission. There is no account to make and no address to leave, so there is nothing to leak.
County, not school. Grade band, not grade
A school plus a grade plus a sentence in your own words identifies a person in a small district. Geography is never recorded finer than a county, and age never finer than a band.
No signature list
Aggregate counts only. A petition carrying student names is exactly the artefact that could be used against the people who signed it.
Network addresses are salted hashes
Rate limiting needs to tell two submissions apart, not to know who you are. An address is reduced to a salted SHA-256 digest before it is stored, and it is never kept in a readable form.
A threshold before any figure is published
Results stay hidden until enough responses exist that no individual answer can be picked out of them. That matters most when a figure is broken down by county and role.
A person reads free text before it appears
The form warns you, at the point of writing, against including details that identify you. Nothing written by a reader is published until a moderator has screened it for them.
One legal note, stated plainly
Not legal adviceFERPA governs schools and their records, not an independent website, and this site holds no student records. COPPA is aimed at services directed to children under 13, and this one is written for high school students and adults.
That is the general shape of it and it is not legal advice. If a district ever adopts, endorses or officially links this site, the analysis changes, and that is the point at which it should go to a lawyer rather than stay on a page like this one.
The related commitments about accuracy and corrections are on the methodology page, including the fact that there is still no published route for sending one.