Contact messages are kept 12 months; nothing here tracks you
The contact form is the only place this site asks for personal data. Here is what it keeps, why, for how long, and how to get a copy or have it deleted.
Four fields you fill in, two the site adds
- Name
- To address a reply.
- Email address
- For replies, and to find your data on request.
- Subject
- One of four topics (county seat, organization listing, press, other), to route the message.
- Message
- Your request, 10 to 4,000 characters.
- Language
- The page language, so the reply can match.
- Time received
- When it arrived; this sets the deletion date.
Deleted 12 months after arrival
Each message carries a deletion date 12 months after arrival. A monthly clean-up removes messages past that date. A request to see or delete data is kept 12 months, or until answered if that is later.
Read only by KFAF staff, never sold or shared
Messages sit in a Cloudflare D1 database readable only by KFAF staff and the site's maintainers. They are never sold or shared, and nobody is added to a mailing list. Kansans for an Affordable Future is responsible for them.
No analytics, tracking cookies or stored IP addresses
No analytics, advertising or tracking cookies. Your browser keeps two preferences: language in a cookie, and theme in local storage. To slow spam, the server briefly counts messages per connection in memory and never stores the address. Links to Facebook, Kansas VoterView and the county election office follow those sites' privacy policies.
Console accounts exist only by invitation
KFAF staff, county presidents and members publish through the console, and every account, staff included, comes from a single-use invitation. The site's maintainers issue the first owner's invitation on the server; owners then invite presidents, members and owners, and presidents invite members for their counties. Nobody can sign up without one. The console keeps the following, for as long as the account exists unless noted.
- Account
- Name, sign-in email, role (owner, president or member), active or disabled, and who invited it. When it was created, last changed and last signed in. Disabling ends its sessions and keeps everything else.
- Counties
- A president's seats, or a member's one county, with who granted each and when. A president's name appears on the public map and county page as seat holder.
- Password
- Stored only as a one-way scrypt hash nobody can read back.
- Sessions
- Signing in sets one cookie, kfaf_session, valid 14 days or until sign-out. The server keeps a SHA-256 fingerprint of it, not the cookie, with start, expiry or end, and last use (noted at most every 10 minutes). Ended sessions are deleted at the account's next sign-in.
- Invitations
- The address, role and counties offered, who created it, and when it was created, accepted or withdrawn. Its link is stored only as a SHA-256 fingerprint. It expires after 7 days; an unaccepted one is deleted 30 days after expiry, the next time anyone creates an invitation. An accepted invitation stays with its account.
- Failed sign-ins
- A SHA-256 fingerprint of the typed address, never the address, allowing five tries per address in 15 minutes. It is deleted when that address signs in, or at the next failed sign-in after the 15 minutes pass.
- Activity record
- Each sign-in; invitation created, withdrawn or accepted; account enabled, disabled or erased; seat change; organization created or edited; revision approved or rejected; and image uploaded. Each entry names the acting account, the record, the county if any and the time, with small facts like a role or counties, never a password, link or form contents.
- Published work
- Every page version an account submits or reviews, with review notes, and every image it uploads stay with the account, so published content traces to its approver.
- Erasure
- Erasure replaces the name and address with placeholders, makes the password unusable and disables the account. It deletes sessions, seats and county access, withdraws open invitations, and removes the address from invitations to it and from any organization page listing it as contact. Its activity record, versions, images and submitted organizations stay under the erased account, and those organizations stay published. Request erasure or a full copy with the form below, using the account's registered address.
Get a copy of your data, or delete it
Enter the address you wrote from or registered with. KFAF staff reply there to confirm it is yours before acting.
Other questions about your data: Open the contact form