Privacy, in plain language

Oravan has no user accounts. On Oravan's pages we never ask you to give us your name or email, or anything else that identifies you, with one optional exception, explained below: your street address.

Your ZIP code, your issue interests, the bills you have read and your call history are stored only in your browser's local storage, on your device. When you look up your members of Congress, the ZIP is sent to our server in the page’s web address so we can match it to a district. It is used in memory, never stored, and never written to a database. Everything else on this list stays on your device. Your record page has a button that erases all of it.

When you ask for a call script, your chosen stance and the bill are sent to our server to draft the text. They are processed in memory and not linked to any identity. We rate-limit by network address to prevent abuse, and we don't keep a log tying addresses to political positions.

One optional exception to "we never ask": if your ZIP code covers more than one congressional district, you can type your street address to find yours. It goes to our server once, is passed straight to the U.S. Census Bureau's public geocoder (so your device never contacts census.gov directly), and is never stored or written to any log. Only the district number comes back.

No analytics trackers, no advertising pixels, no cookies at all. Your language preference is kept in your browser's own storage, like everything else personal here.

Besides the rate limiting above, we keep a few plain daily counts, none of them tied to a visitor: how many times each kind of page is opened (the home page, a bill page, a question page and so on, never which one); how many new call scripts are drafted, and how many script requests each of our limits turns away; how many times each tool on our MCP server for AI assistants is used, and how often each assistant app connects; how many themes we suggest to organizations matching a widget to their site; and how often Oravan's widgets load, per partner and per website domain.

We also keep one number a day for the whole site, never split by page: how many different network addresses opened at least one page, bots included. It is counted from each address scrambled one-way with a key that lasts only that day and is then deleted, so no address is stored and none can be recovered from that number.

This matters because political beliefs are sensitive data. The safest database is the one that doesn't exist, so we didn't build one.

For questions, email hello@oravan.org. Oravan is built in the open, and every line of its code can be inspected.