Privacy

The website

• One cookie, and only if you buy something. It is set when a payment completes and it holds a signed receipt: which plan you bought and when it expires. That is the entire contents — no identifier for you, nothing about which districts you have read, and no way for us to work either out from it. It is read for exactly one purpose, which is deciding whether to unlock a page, and it goes away when it expires or when you clear it. Until you pay, the site sets nothing at all and there is nothing to consent to.
• No analytics or advertising scripts. The pages load no third-party JavaScript at all. The only script on the site is the district autocomplete, which asks our own server.
• Your searches reach our server as ordinary requests, the same way the page you are reading did. We do not attach them to you and we do not store them.
• Your email address, only if you type it in. Two forms on this site ask for one: a list for the day the phone app ships, which sends one email and then never again, and a district watch, which sends at most one email a month and only when a new school ballot measure appears. Each stores the address, which districts prompted it, the page language it was entered in, and the date. Every mail carries a one-click unsubscribe link that deletes the address from that list on the spot. The address is not sold, not shared, and not put on a newsletter.

If you pay

Payment is taken by Stripe, and your card number never reaches this site — the checkout page is Stripe's, on Stripe's domain. What comes back to us is a customer identifier and the fact that a payment succeeded. We store that so a refund or a renewal has something to attach to. A purchase made here unlocks this browser; the phone apps sell their own unlock through Apple and Google, because Apple requires it. We do not receive your card details and could not store them if we wanted to.

The iPhone app

• No account and no sign-in. The app has no identifier for you, so there is nothing for anything else here to be linked to.
• Saved and recently viewed districts never leave the phone. They are stored in the app's own settings on the device. We cannot read them, they are not synced, and deleting the app deletes them.
• Location, only when you ask, and it does not leave the phone. The app asks for permission at the moment you tap "districts near me" and never at launch. The list of districts and where they are is built into the app itself, so your position is compared against a file on your phone and the answer never involves us. We do not receive it, so there is nothing for us to store, link or keep.
  
  This used to be untrue and it is worth saying how. The district locations were only in our database, so the app sent your position — rounded to about 110 metres, but sent — and it appeared in our host's request log like any other URL. Shipping the list inside the app removed the request rather than the logging.
• No SDKs. The app links no advertising, analytics, attribution or crash reporting library. It talks to our server and to nothing else.

What our host sees

The site and the API run on Cloudflare Workers. Like every web host, Cloudflare records that a request happened — its time, its URL, and the network address it came from. Cloudflare keeps these operational logs for at most seven days and then deletes them; we use them to find out why something broke, and they are never joined to anything else on this page. Nothing in that log is copied into our database.

The app's "districts near me" makes no request at all, so there is no log line for it and no coordinates in one. Our API does still have an endpoint that will rank districts around a point for anyone who calls it directly; a position sent to that one is in the URL, and so in the log, for the same seven days.

What we never do

• We do not sell or rent anything about you to anyone. There is no version of this product where that changes.
• We do not build a profile of which districts a person looked at. The design is what prevents it: the app has no identifier, and the list of districts you have opened is on your phone rather than on our server.
• We do not knowingly collect anything from children. This is a tool for adults deciding where to live and what to vote on.

Getting your data removed

The only thing we hold that is about a person is an email address you typed into the notify form. Write to info@cazimedia.com from that address and it is deleted — there is nothing else to delete, and no account to close. Everything else on this site is public reference data about school districts, which is not about you.