Privacy policy & safety

Last updated: August 3, 2026

No medical or legal advice

This site is advocacy, not medical or legal advice. People experiencing opioid dependence or withdrawal should consult qualified medical professionals. Testimonials are personal reports, not clinical proof.

Who operates this site

This site is run by the Save SR-17018 campaign, a grassroots advocacy effort. To reach us about your privacy or your data, please use the data request form — it goes straight to the person who maintains the site.

What we collect

The letter, email, and call tools run in your browser. The name and address you type are used to build your message on your device and are not sent to our server. When you download or print a letter, that happens locally in your browser.

There is one exception, and only you can trigger it. On the finished-message screen you may tick “Share my story” or “Share my story anonymously” and press send. Only then does a copy of your message reach us. If you tick neither, nothing about your message is sent.

• Share my story — we store the message text, your name, city, state, and (for letters and emails) your email address. Your email is never published; it is only used to reach you about your story.
• Share my story anonymously — we store the message text and your state only. Your name and city are removed from the message text in your browser, before it is sent, and your name, city and email are not transmitted at all. This matters because the message itself names you: the letter templates include “I am a constituent writing from [your city, state]”, and the call script opens “Hi, my name is …”.

In both cases your street address, ZIP code, and phone number are never sent — they are used only to format the letter on your own device. Shared messages are reviewed by a person and are never published automatically. As with any free-text story, please don't include anything that could put you at risk.

Once a moderator approves one, a shared message may be published on our messages page and used in advocacy materials. A message shared with your name appears with the name, city and state you entered; a message shared anonymously appears with your state only. Your email address is never shown in either case. You can ask us to remove it at any time.

If you submit a testimonial, we store what you enter — your name or pseudonym, email, city and state (optional), your role, and your story — so a human moderator can review it. Your email is never published; it is only used to reach you about your story. Please note that free-text story fields may contain sensitive health information; only the site operator can read unpublished submissions.

Cookies

We use only two first-party, functional cookies set by our own server: a csrftoken cookie that protects forms against cross-site request forgery, and, for site staff signing into the admin, a sessionid cookie. We set no advertising or tracking cookies, and no third party sets cookies through this site.

Privacy-preserving analytics

We count anonymous actions (for example, "a letter was generated") to understand campaign momentum. These counts contain no personally identifying information — no names, addresses, IP addresses, or message contents. At most we record a coarse two-letter state so we can show how many states are represented. We use no Google Analytics, pixels, or other third-party analytics.

How long we keep data

Testimonials and shared messages are kept while they are pending review or published, and are removed if rejected or when you ask us to delete them. Anonymous analytics counts contain no personal information and may be retained indefinitely to show campaign totals over time.

Your rights: access and deletion

You can ask us to show you, correct, or delete any information you sent us. Use the data request form. So we can confirm the data is yours, please use the same email you submitted with; we review every request by hand and may email you to verify before acting.

One honest limit: if you shared a message anonymously, we hold no name or email for it, so we cannot confirm it is yours from our records — that is the point of anonymity, and it is the trade-off for it. Tell us roughly when you sent it and quote a distinctive line from it, and we will do our best to find and remove it. The same applies to a shared call script, since the phone tool never asks for your email.

Third parties & hosting

The site is hosted on Render.com (United States), which stores our data on our behalf. We do not sell or share your information, and we use no ad networks or data brokers. Some pages link out to other sites (for example research databases or social share pages); once you follow such a link, that site's own privacy policy applies.

Children's privacy

This site is intended for adults and is not directed at children under 13. We do not knowingly collect information from children.

Please protect yourself and others

When writing a letter or submitting a story, do not include vendor names, where to buy anything, current possession details, dosing instructions, or anything that could incriminate you or others. Moderators remove such details, but it is safest not to include them at all.

Testimonial moderation

Nothing you submit is published automatically. Every story is reviewed by a person, edited to remove risky or absolute-claim content, and only published with your consent. If you asked us not to publish your name, we show your role and state instead.

Changes to this policy

If we change how we handle your information, we will update this page and the "Last updated" date above.