Privacy
Effective date: to be set at launch.
ZIP Code Districts is an independent, open-source project. The map and all of its data work without an account, cookies or tracking. This page covers what happens if you sign up for updates.
Email signups
- What we keep: your email address, the ZIP code if you enter one, and the date. We email you once to confirm; nothing more is sent until you click the link.
- Spam protection: a salted hash of your network address is stored with the signup so the same network can't submit many signups an hour. The address itself isn't stored.
- Use: occasional project updates. Every email has an unsubscribe link that takes effect right away.
- Sending: confirmation and update emails are sent through an email delivery provider (currently Resend), which processes your address only to deliver them.
Bluesky and AT Protocol signups
- Sign-in: you sign in on your own account's server (Bluesky or any other). We never see your password or email address.
- Access we ask for: permission only to create a follow of the project account and, if you choose, one supporter record. We can't read your posts or messages or change anything else.
- Public records: follows and supporter records are public on the AT Protocol network by design. Anyone can see them, and you can delete them from your account at any time. The supporter record contains no location.
- What we keep: your account identifier (DID) and handle, links to the follow or supporter record you created, and the ZIP code if you enter one. The ZIP code is private: it is never published and never added to your account.
- No ongoing access: we sign out of your account as soon as the signup is done, so we hold no access to it afterward.
What we publish
Only totals: how many people have signed up, and counts by state or district when there are enough to keep individuals anonymous. Never names, addresses, handles or ZIP codes from private signups.
What we don't do
- No advertising, no tracking cookies, no selling or sharing of signup data.
- The map remembers your theme, projection and legend choices in your own browser (local storage). That stays on your device.
Services that handle requests
The site is hosted on Cloudflare, which processes requests to serve it. The typefaces load from Google Fonts. Each of these services sees the network address of your browser when it loads the page.
Deleting your data
Unsubscribe with the link in any email, or write to privacy@zipcodedistricts.org to have your signup deleted. For AT Protocol signups, delete the follow or supporter record from your account and email us to remove the stored entry.
Children
Signups are not intended for children under 13.
Changes
If this policy changes, the new version will be posted here with a new effective date. Material changes will be emailed to confirmed subscribers.