Privacy boundaries
Only the minimum data needed for the feature
Public browsing
Browsing, searching, preliminary eligibility checks, and calendar downloads do not require a name, email, Notice ID, PIN, address, banking details, or supporting documents. Eligibility answers are processed temporarily in the browser and are not written to the server.
Saved cases and reminders
Email is required only when you choose saves or email alerts. We store the email, language preference, saved case IDs, and criteria you explicitly subscribe to, solely to provide those features. We do not use them to decide eligibility or sell leads.
Email delivery and update consent
Case information updates require a separate opt-in and can be stopped in Saved & alerts. Cloudflare Email Service delivers our email. Detailed delivery status, provider message IDs, and email address digests are cleared after 90 days without activity, without storing message bodies or open/click tracking events. After a bounce, complaint, or provider suppression, an email digest is retained to prevent further sending until a reviewed removal, including after account deletion. These digests are linkable pseudonymous records, not anonymous data.
Page issue reports
Reports require no email. We store the selected case, issue category, brief description and review record, without requesting identity or claim materials. Cloudflare Turnstile provides abuse protection. Save your receipt link to view status and public review updates; we do not email you about the report. Closed reports are retained for 180 days and pending reports for at most one year.
Sign-in cookie
After email verification, a Secure, HttpOnly, SameSite cookie maintains the session and is not used for advertising. Sign-in links expire after 15 minutes and work only once.
Download and delete account data
While signed in, use Saved & alerts to download your profile, saves, subscriptions, reminders, and retained email records as JSON. Sign-in/session tokens and their hashes are excluded. Anonymous issue reports are not linked to an account; use their separate receipt links.
Deletion removes the account, all sessions, existing sign-in links, saves, subscriptions, reminders, and local email records together. A failed deletion rolls back these changes. Mail already handed to a provider cannot be recalled, and deletion does not immediately erase provider or backup copies.
A deletion marker containing the account ID, email digest, and deletion time is retained for 30 days to handle concurrent sends and backup recovery. It contains no plaintext email but remains linkable. Deletion markers must be reapplied during recovery; expired backups must not be used to restore user data. Professional editors’ case versions and review records remain to preserve editorial history.
Scheduled retention
Expired sign-in links and sessions are cleared by the daily schedule. Detailed email records are cleared after 90 days without activity; minimal status, timestamps, and duplicate-prevention records remain until account deletion. Cleanup does not requeue old notifications. Source checks retain 90 days of history plus each source’s latest check; completed discovery/retry records retain 90 days; operations review logs retain one year. Case editorial history is retained separately. Each daily cleanup handles up to 500 rows per category and may be delayed by scheduling failures or a backlog.
Operational logs
The service may record request paths without query strings, random request IDs, and error types for security and reliability. Editorial audit logs record editors, versions, and review decisions, never user claim materials.
Advertising and cookies
The Settlement File currently loads no Google AdSense code or advertising cookies. If advertising is introduced, third-party vendors such as Google may use cookies, web beacons, IP addresses, or other identifiers to serve and measure ads; we will provide applicable consent choices and update this policy before activation. You can manage personalized advertising through Google Ads Settings and learn how Google uses information from partner sites.
Anonymous usage counts
Usage request bodies contain only an action type and page language and are sent to this site. Counts are grouped by UTC date and retained for 90 days. They contain no search terms, case identifiers, eligibility answers or outcomes, account/email/session identifiers, full page URLs, or referrers. We do not link individual journeys or load third-party analytics scripts.
Counts cover search submissions, detail views, check starts/completions, primary official-link clicks, and subscription attempts/successes. Success means a preference was saved, not email delivery. You can turn collection off in this browser; the choice stays on this device. Do Not Track or Global Privacy Control signals disable collection.
Browser preferences are not available; collection stays off.