Your information
Privacy policy
Exactly what this site collects, why, and what you can do about it.
Last updated: September 23, 2026
Who we are
ExtendTPS.org is an independent citizen-led grassroots campaign supporting the extension of Temporary Protected Status for Haitians. It is run non-commercially by volunteer community advocates and is not a registered company or charity, and is not affiliated with, endorsed by, or operated by any government agency, political party, or candidate. Because the campaign has no business premises, we do not publish a postal address; all privacy contact is handled online. Privacy contact: use our privacy request form or our contact form. If you need a postal address for a formal legal or regulatory request, ask through either form and we will provide one.
Information you give us
| Form | What is collected | Why |
|---|---|---|
| Petition | Name, email, state, ZIP, optional comment | Count and show support to Senate offices and press (email never published) |
| Contact | Name, email, subject, message | Reply to you |
| Volunteer | Name, email, phone (optional), state, interests | Contact you about volunteering |
| Employer statement | Business and contact details, statement, publish permission | Publish statements you approve; follow up |
| Partner organization | Organization and contact details, publish permission | List your organization if you approve |
| Video / story submission | Name, email, link or story, permission | Review for possible publication |
| Press inquiry | Name, outlet, email, message | Respond to media |
| Privacy request | Name, email, request type, details | Handle your privacy request |
| Staff sign-in (team only) | Email, password, role | Secure access to the admin dashboard |
Information collected automatically
Security data: when you submit a form or tap an action counter, we store a one-way scrambled (hashed) version of your IP address, the form name, and whether the attempt was blocked. This limits spam and abuse. Raw IP addresses are not stored in our database. These records are deleted automatically within 30 days.
Cloudflare Turnstile checks that form submissions come from a person. It processes technical signals such as your IP address and browser characteristics under Cloudflare's privacy policy.
Hosting logs: our hosting and network providers (Lovable and Cloudflare) process standard request data such as IP address and browser type to deliver and protect the site.
Optional analytics and media: Google Analytics and embedded videos load only if you allow them. See the Cookie Policy.
What we never ask for
We do not ask for immigration status, A-numbers, case numbers, passport or Social Security numbers, or documents. Please do not include them in any message. If you do, we will delete them when we notice.
Legal bases (for visitors in the EU/UK)
Consent for optional analytics, embedded media, and publishing your name or statement; legitimate interests for running the campaign, answering messages, and preventing abuse; legal obligation where the law requires us to keep or disclose information.
Who processes your data
- Lovable (website hosting, database, file storage, staff sign-in)
- Cloudflare (domain, network security, caching, Turnstile form check)
- Google (Analytics — only with consent; YouTube — only if you load videos)
- Email delivery provider used for staff invitations from notify.extendtps.org
International transfers
These providers may process data in the United States and other countries. Where required, they rely on their own transfer safeguards such as standard contractual clauses.
What we publish and share
We never publish email addresses, phone numbers, or home addresses. Statements, partner listings, and stories are published only with your permission. Petition totals may be shared with Senate offices and press. We do not sell or rent personal information and do not use advertising cookies.
How long we keep it
Form submissions are kept for as long as the campaign needs them, then deleted or anonymized (retention period to be confirmed by the organization). Security records: up to 30 days. Your cookie choice: until you change it or clear your browser storage.
Your rights
Depending on where you live, you may ask to access, correct, delete, or receive a copy of your information, object to or restrict its use, or withdraw consent at any time. Send a request through our privacy request form. EU/UK residents may also complain to their data protection authority.
Children
This site is not directed to children under 13, and we do not knowingly collect their information.
Security
Submissions are stored in an access-controlled database visible only to authorized staff according to their role. No online system is perfectly secure.
Changes
We will update the date at the top of this page when this policy changes.