Privacy
No account is needed for anything on this site, the API or the MCP server. We keep as little as we can.
Website
Pages, fonts and flags are served from electionindex.org itself. If you accept, we load Google Analytics 4 to count visits and see which pages are read; it sets first-party _ga cookies and sends usage data to Google. If you decline or ignore the banner, nothing is sent to Google and no cookie is set. Your choice is stored in this browser, and you can change it under at any time.
API, MCP server and embeds
These never load analytics and set no cookies. The server counts each request by route, election, kind of client (a browser, a search engine, an AI agent, a script), referring site and, for MCP, the tool called. It stores no IP address, no cookie and no full user agent, and keeps the counts for three months.
Rate limits. Without a key: 60 requests per minute per IP address; with a free key, 1,000 per minute. The limit is applied by our host, Cloudflare, by IP address in memory; we don't store the address. Details under limits.
API keys are optional. If you request one, we keep the project name, organisation and use you give, the optional email address (used only to tell you about changes) and a hash of the key.
Corrections
Reports are public, so don't put personal data in them. To stop floods, we keep a salted hash of the sender's IP address for one hour, then it expires.
Our host
Election Index runs on Cloudflare, which processes IP addresses to deliver and protect the service and keeps short-lived request logs (a few days) that we use only to find errors.
Contact
Mistakes in the data: the public corrections form (also as the MCP tool submit_correction and POST /v1/corrections). Everything else, including support for the API and MCP server and privacy requests: team@electionindex.org.