An address you type is matched in this browser against a file we host. It is not sent to our server or to a geocoder.
Your civic map (bodies, lenses, findings, actions) stays in this browser. It is not uploaded. The share card is a picture drawn here.
A vote stores a random id from this browser, and the order you rank. Not your name.
Rate limits use a hash of the network address mixed with a salt that changes every UTC day. Old salts are deleted. The address itself is not stored.
An email is optional, double opt-in, and not shared. Unconfirmed addresses stay unconfirmed.
We do not sell data. We do not publish plates, VINs, personal street addresses from 311, or officer names, badge numbers, or locations. Pay, when it is added, is by department and job title.
This site loads no third-party script, font, tile server, or analytics beacon. Lens marks are Live, Public, not loaded yet, or Not published.
