Privacy Policy

This policy covers api.ballotdata.net, BallotData LLC’s developer site and API. Buying data on ballotdata.net is covered by its own policy.

What we collect

• Accounts: your name, email and organization, from your purchase on ballotdata.net, a salted hash of your password (never the password itself), when you confirmed your email, two-step verification settings, and your API keys (we keep only a fingerprint of each key, never the key).
• Signing in: a session for each browser you sign in from, with its IP address and browser type, so you can see and end them.
• API use: each request’s route (never its query string), status, time taken, IP address and client type, kept 90 days, for limits, billing, support and security. Important account changes are kept in an audit log.
• Site analytics: how visitors use this site’s pages, described below.

Site analytics

We run our own analytics to see which docs are useful and where confirming an email, signing in or creating a first key gets stuck. No outside analytics or advertising company is involved, and nothing is shared with one. The API itself (/v1) isn’t part of it.

• Your browser keeps a random ID in its local storage (not a cookie) for about 13 months, and a second one for each visit, which ends after 30 minutes without activity. They aren’t linked to your account.
• We record the pages you view, how long each was on screen and how far you scrolled, the links you click (our own pages, or only the name of another site), whether a form was sent or came back with something to fix, that an email was confirmed or a password set, that a key was created (with how many permissions and days it has), which code samples were copied and in what language, the site you came from and any campaign tags in the link, the kind of device, browser and operating system, and page speed and script errors.
• We never record what you type into a form (emails, passwords or codes), your API keys, your IP address or full browser identification string, or anything in the address bar beyond the page.
• Analytics records are deleted after 14 months.

Analytics is on unless you turn it off here. If your browser sends Global Privacy Control or Do Not Track, it’s already off and nothing is recorded. Turning it off deletes the ID and everything recorded under it. The choice is kept in this browser, for this site only.

How we use it

To run your account and the API, keep both secure, enforce limits, answer support questions and improve the docs. We don’t sell personal information.

Who processes it for us

Amazon Web Services (hosting and email) and Cloudflare Turnstile (bot checks on sign-in and password resets), each only to provide their service.

Cookies and local storage

One cookie keeps you signed in. We use no advertising or tracking cookies. Local storage holds the analytics IDs, your analytics choice and the code-sample language you picked.

Your choices

You can ask to see, correct or delete your information, subject to records we must keep for tax, accounting and security. California residents have these rights under the CCPA. Write to sales@ballotdata.net.