Privacy

Data Practices

Privacy and analytics on OrlandoFirst.city

OrlandoFirst.city is an independent civic-research project. We collect only what is needed to keep the audit accurate and to know which research pages are reaching constituents. We do not fundraise, run political ads, or sell data.

audit-container-narrow

Page traffic is measured through Vercel Web Analytics and Cloudflare Web Analytics, privacy-focused, cookie-less analytics tools provided by the hosting and edge network layers. They record aggregate counts such as which routes are viewed and the country and device class of the visitor. They do not set tracking cookies, do not build cross-site behavioral profiles, and do not share data with advertising networks.

No third-party advertising trackers (no Google Analytics, no Meta Pixel, no ad networks).

No cross-site identifiers, fingerprinting, or persistent visitor IDs.

No collection of full IP addresses; the analytics service derives only coarse geography.

No fundraising lists. Audit update requests are handled by email for this launch; the site does not store newsletter form submissions.

The Civic Courage Forum is a public-facing discussion guide, not a live posting system in this release. The web form is preview-only; questions, corrections, and source material are handled by email and reviewed before anything is published.

Correction requests and candidate responses are handled by email. Do not send private, confidential, medical, financial, legally restricted, or non-public personal information. OrlandoFirst.city may redact visible previews or omit attachments from public pages when contact details, signatures, bank information, or other personal identifiers are not necessary to understand the record.

Existing private editorial records may be retained for audit provenance, correction review, and abuse prevention. New public discussion pages do not collect live comments or account data.

The site does not set marketing, tracking, or public visitor cookies. The private editorial surface authenticates each admin API request with server-only header tokens.

We are evaluating a self-hosted privacy-first analytics service (Plausible) on a project-controlled subdomain so all visitor data physically resides on infrastructure we operate. This page will be updated when that change ships, and the analytics provider name will always be disclosed here.

Privacy questions or correction requests:

research@orlandofirst.city