Legal
StateThat is a United States civic engagement platform that helps people understand public policy, vote on civic issues, and compare their views with elected officials. Privacy questions can be sent to privacy@statethat.com.
We collect account identifiers such as email or OAuth identity, username, and phone number. Your phone number is stored to verify your identity and enforce one account per person — it is never shared with third parties or used for marketing. For jurisdiction lookup, you enter a United States address; the address string is not stored, and only resolved district codes (state, congressional district, state senate district, state house district) are retained.
Optional demographic fields may include age range, gender, race or ethnicity, education level, income range, employment status, occupation or industry, household size and composition, community type, religion, political affiliation, languages spoken at home, and technology or media habits. All demographic fields are voluntary. We also collect votes, follows, notification preferences, sign-in timestamps, IP addresses for fraud and abuse detection, and standard device or browser metadata from web server logs.
StateThat uses information to authenticate users, personalize feeds, compute alignment scores between user votes and representatives' actual voting records, send opted-in notifications, prevent abuse and Sybil attacks, operate one-account-per-person protections, and improve product reliability.
Votes on bills, executive orders, and topics may reveal political opinions. StateThat treats this as sensitive. We do not sell, license, or share individual vote data with third parties. Aggregate anonymized statistics, such as district-level support percentages, may be displayed publicly when privacy thresholds are met. Individual votes are private by default: they appear on your public profile and in your followers' activity only if you turn that on.
By providing your phone number, you consent to receive a one-time verification code via SMS. We use a third-party SMS provider for delivery. Carrier message and data rates may apply. StateThat does not send marketing SMS.
We use providers for hosting, authentication, SMS, AI summarization, mapping, analytics, observability, and related operations. These providers process data only as needed to provide their services, and we vet them for security and privacy practices.
We do not sell personal data. We do not share individual data with advertisers. We may disclose information when required by law, to protect users or the service, or to respond to valid legal process.
Account data is retained while your account is active. You can delete your account from Settings, Danger Zone. Deletion permanently removes personal data, votes, profile data, and account information, including your phone number association.
One exception: to stop a deleted account's phone number from immediately opening a new account and skewing representative alignment scores, we keep a one-way keyed hash of that number and the deletion date for 90 days. Nothing else is kept, the hash is not linked to your votes or any other data, and it is erased automatically after 90 days. During that time the number cannot be used to sign up or be added to an account. We rely on our legitimate interest in preventing duplicate accounts for this; because it is the minimum needed for that purpose, we may keep it for the full 90 days even after an erasure request.
California residents may request to know what personal data we hold, request deletion, and opt out of sale. StateThat does not sell personal data, so the sale opt-out right is inherently satisfied. Submit requests to privacy@statethat.com. We will respond within 45 days as required by law.
StateThat is intended for users 18 and older. We do not knowingly collect personal data from anyone under 13.
We use HTTPS, access controls, rate limiting, production environment controls, and monitoring to protect StateThat. No service is perfectly secure. Report security concerns to privacy@statethat.com.
We will update the Last updated date when this policy changes. Material changes will be announced in-app when appropriate.
Contact StateThat about privacy at privacy@statethat.com.