Privacy

We built this site to need as little information about you as possible. You never need an account to use it.

If you just browse

No advertising, no analytics trackers, and no tracking cookies.
The benefits checklist runs entirely in your browser. Your answers are never sent to us, even if you have an account.
Your chosen state and any bookmarks you save without an account stay in your own browser (local storage). Clearing site data removes them.
If you send feedback, we store the page address, the type of feedback, and any message you type. Please don't include personal information.

If you create a free account

An account lets you keep bookmarks across devices, follow states and topics, and get email alerts. We store only:

Your email address and, if you give one, a display name.
A securely hashed password (we can't read it), if you choose one, and sign-in sessions. Sessions use one essential cookie and expire after 30 days.
The pages you bookmark and the states, categories and topics you follow.
Your email preferences: instant or weekly, day, time and time zone.
A record of which alerts we sent you and whether they were delivered. Delivery records are kept for 180 days.

We never ask for your Social Security number, service records, disability rating, health or financial information. Please don't put any of that in your display name.

Ways to sign in

Password: stored only as a secure hash.
Emailed one-time code: we email a 6-digit code that works once, for 10 minutes. We store only a hash of the code until it is used or expires. Signing in with a code confirms you own the address; if you don't have an account yet, it creates one.
Continue with Google (when offered): Google shares only your email address, whether Google has verified it, and your name. We don't receive your Google password, contacts, files or any other Google data, and we don't keep your profile photo. If the address already has a confirmed account here, we link Google to it. You can remove access any time at Google Account → Third-party connections; deleting your account here also removes the link.

Email alerts

Alerts are off until you turn them on and confirm by clicking a link we email you.
We only email changes our editors have reviewed. Proposed or pending changes are clearly marked "Not final yet".
News articles about the states and topics you follow are included in your alerts (or follow "All news articles"). Articles about changes that are not final yet are emailed only if you turn that on. If we retract an article, we email a correction only to people who were sent it.
Every alert has a one-click unsubscribe link that works without signing in. You can also change or stop alerts any time on your alert settings page.
Emails are sent through our email provider, Emailit, which processes your address only to deliver our messages. We never sell or share your address.

You can get the weekly newsletter without an account. We keep your email address, the states and topics you pick, whether you want changes that are not final yet, when you signed up and confirmed, and a scrambled (hashed) form of your internet address to stop abuse.
Nothing but a confirmation link is sent until you confirm. Unconfirmed addresses never get the newsletter.
Each newsletter lists only reviewed changes and published articles, every fact with a link to its official source. Anything not final is marked "Not final yet", and only goes to people who asked for it.
Members who chose the weekly digest get the newsletter instead of a separate digest, so each address gets one email.
We don't use tracking pixels or tracked links. Every newsletter has a one-click unsubscribe link and a link to change or delete your preferences. If an address bounces or is reported as spam, we stop sending to it.

Your choices

Download your data: Account → Settings → "Download my data" gives you everything we store about you as a file.
Delete your account: Account → Settings → Delete account erases your account, bookmarks, follows and preferences right away. Delivery records are kept without your email or account link until they expire.
If an address bounces or reports spam, we stop emailing it and keep only a one-way hash so we don't email it again.

Service providers

Cloudflare hosts the site and processes standard request logs for security and reliability, and runs the bot check on sign-up and email forms (Turnstile). Emailit delivers our email, including sign-in codes. If you choose Google sign-in, Google confirms who you are under Google's privacy policy.

Questions or requests: use the feedback form at the bottom of any page and choose "No", or write to Varry LLC, 8401 Mayland Dr #7387, Richmond, VA 23294.