The secret ballot is a hundred-year-old tradition in the United States, and we strive to show the same respect for the privacy of your data on Tiller as we do for your vote.

The short version

  1. We don't do things with your data that you wouldn't expect. - We make it clear, when we ask for data, what we intend to do with it. - We treat your data the same way we treat our own.

  2. We don't share your personal information. - We only publish or sell data about anonymous groups of people (e.g. "not all of our users read our privacy policy") unless we have your explicit consent to do otherwise. - We do get data about you from third parties, but only (a) your voter registration, which by law is a public record, and (b) anonymized demographic information from Google's ad network.

  3. We respect the law. - We don't do anything with your voter registration data that the law doesn't allow for. - We surrender data to government authorities if legally required to do so.

If you ever have questions or concerns about your privacy, please don't hesitate to reach out to us at [email protected].

Your email address

We ask for your email address as a way to identify who you are, much like you're asked for your full legal name when you go to vote.

We do use your email address to communicate with you. This may include, but isn't limited to, reminding you about upcoming elections, sending you replies from candidates and elected officials you've contacted, and letting you know about important changes to Tiller, such as new features or amendments to this privacy policy.

We don't give your email address to third parties. Ever. Even if a candidate or elected official sends you a message through Tiller, they won't ever see your email address.

Your password

We ask for a password so that other people who know your email address aren't able to impersonate you on Tiller.

You're responsible for using a password that's secure. This means a password that isn't easy to guess, and ideally one that you don't use anywhere else.

We do our best to keep your password secure, but we can't guarantee that our security will never be broken. If it is, we'll inform you immediately and take appropriate action.

Your voter registration

In most states, voter registrations are a matter of public record, so long as that data is used only for political purposes (like Tiller).

We ask for your legal name, date of birth, and address so that we can find your registration record. From that record, we get information about any party affiliation you have, how often you've voted in the past, and what political jurisdictions (precinct, school district, etc.) you're part of.

We don't have access to secure identity information like your social security number or driver's license number.

If you're concerned about your registration being a public record, please investigate the laws in your state; many states provide special protections in exceptional circumstances. But if your registration is removed from the public record, you'll unfortunately no longer have access to the full functionality that Tiller offers to registered voters.

If someone else knows your legal name, date of birth, and address, they could falsely claim the right to your voter registration. If you think this has happened to you, please reach out to us at [email protected].

Your activities on Tiller

We track the actions you take on Tiller to help us better understand how you use it and how we can improve it. We don't provide this information in a personally-identifiable way to third parties; however, we may publish or sell anonymized, aggregate data about how groups behave.


If you create a voter profile, information you choose to publish (like your name or party affiliation) will be publicly visible. You can remove this information from Tiller any time you choose, but other websites (like the Internet Archive) may have already captured this information, and we're not able to remove it from anywhere else.

If you endorse a candidate for office, that endorsement is considered part of your voter profile and is publicly visible in the same way.


If you send a message, that's private; only you and the recipient(s) can see it. While we do have access to these messages, we won't read them unless you explicitly consent, for example to fix an issue that you've reported.

If you send an anonymous message to an elected official or candidate for office, we'll respect that anonymity and never inform the recipient of the message of your identity unless you explicitly consent to it. However, we may inform the recipient that you're a verified voter in their jurisdiction.

We'll also comply with any legal action that requires us to reveal the contents or sender of a message.


We use cookies in the typical way: primarily to keep track of whether or not you're logged in, and to temporarily store information about your session.

We also use cookies from Google Analytics Demographics and Interest Reporting to get anonymized demographic information about you. We use this information to better understand what kind of people use Tiller. We may publish or sell this anonymized, aggregate data about the behavior of groups of people, but never in a way that identifies you.

You can control or opt-out of Google's tracking of your demographic information:
You can also opt-out of Google Analytics tracking entirely:

Getting your data

We don't currently provide a way for you to get all your activity data from our records. If you have an exceptional need, please contact us at [email protected].

Deleting your data

We don't currently provide a way for you to permanently delete your data from our records. Please use Tiller responsibly.

Changes to this policy

We reserve the right to make changes to this policy. If we make significant changes that we think might affect the way you use Tiller, we'll let you know.